Fix xds-sender SSL, mpi-client privileges, and identifier mapping

[mherman22]

Summary

• xds-sender SSL fix: Switch all 4 xds-sender endpoints from public HTTPS (openhim.sedish-haiti.org) to internal HTTP (openhim-core:5001). Fixes SSLPeerUnverifiedException that fires every hour on PullNotificationsTask.
• mpi-client privilege fix: Patched santedb-mpiclient-1.1.4.omod with Context.addProxyPrivilege() for Get Identifier Types, Get/Edit/Add Patient Identifiers in both PatientSyncWorker and PatientUpdateWorker. Fixes APIAuthenticationException: Privileges required: Get Identifier Types on every patient sync.
• Identifier type mapping fix: Changed mpi-client.pid.exportIdentitiferType from Patient ID=iSantePlus ID to iSantePlus ID=iSantePlus ID — the key must match the actual OpenMRS identifier type name in the DB.

Context

All three issues are visible in docker service logs isanteplus_isanteplus:

1. SSLPeerUnverifiedException: Hostname openhim.sedish-haiti.org not verified — every hour
2. APIAuthenticationException: Privileges required: Get Identifier Types — on every patient sync
3. Identity domain iSantePlus ID has no local equivalent / getIdentifierTypeByName returned null — caused by wrong identifier type name in config

Test plan

• Redeploy with new SQL init and verify xds-sender pull notifications connect without SSL errors
• Verify mpi-client patient sync completes without privilege errors
• Verify identifier cross-referencing works (no "has no local equivalent" warnings)
• For running instances: update global properties directly in MySQL since SQL init only applies to fresh deploys

🤖 Generated with Claude Code

[mherman22]

Closing — the identifier mapping fix is already covered in #3. The module code fixes are submitted upstream as IsantePlus/openmrs-module-mpi-client#58 and IsantePlus/openmrs-module-xds-sender#110.