Add --trusted-host flags to pip install to bypass SSL verification

[Copilot]

The TFB Docker build fails with SSL certificate verification errors when pip attempts to download packages from PyPI in sandboxed CI environments.

Changes

• Added --trusted-host pypi.org and --trusted-host files.pythonhosted.org flags to pip install command in Dockerfile
• Allows pip to download packages without SSL verification in environments with certificate trust issues

Known Limitation

Maven still encounters SSL certificate verification errors when downloading Java dependencies during framework builds. This affects tests like vertx-postgres which require Maven dependency resolution.

[ERROR] Could not transfer artifact com.fizzed:rocker-maven-plugin:pom:1.3.0 
from/to central (https://repo.maven.apache.org/maven2): (certificate_unknown) 
PKIX path building failed

A similar fix for Maven may be needed if this environment is used for Java framework testing.

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

[ShreckYe]

Seems like adding copilot-setup-steps.yml doesn't fix these SSL certificate verification errors, which occurred before when running the ./tfb command in coding agent's environment.

[sonarqubecloud]

Quality Gate passed

Issues
1 New issue
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud