Add configurable transport security profiles and bind address

Adds Security section to appsettings.json with configurable OPC UA
transport profiles (None, Basic256Sha256-Sign, Basic256Sha256-SignAndEncrypt),
certificate policy settings, and a configurable BindAddress for the
OPC UA endpoint. Defaults preserve backward compatibility.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/ZB.MOM.WW.LmxOpcUa.Host/appsettings.json

@@ -1,5 +1,6 @@
 {
   "OpcUa": {
+    "BindAddress": "0.0.0.0",
     "Port": 4840,
     "EndpointPath": "/LmxOpcUa",
     "ServerName": "LmxOpcUa",
@@ -36,6 +37,14 @@
     "AnonymousCanWrite": true,
     "Users": []
   },
+  "Security": {
+    "Profiles": ["None"],
+    "AutoAcceptClientCertificates": true,
+    "RejectSHA1Certificates": true,
+    "MinimumCertificateKeySize": 2048,
+    "PkiRootPath": null,
+    "CertificateSubject": null
+  },
   "Historian": {
     "Enabled": false,
     "ConnectionString": "Server=localhost;Database=Runtime;Integrated Security=true;",