fix: disable client cert verification for Phase 2 development

internal/cli/join.go

@@ -99,9 +99,10 @@ func JoinCluster(leaderAPI, advertiseAddr, nodeName, leaderCACert string, pkiDir
 			},
 		}
 	} else {
-		// For development/testing, allow insecure connections
+		// For Phase 2 development, allow insecure connections
 		// This should be removed in production
-		log.Println("WARNING: No leader CA certificate provided. TLS verification disabled.")
+		log.Println("WARNING: No leader CA certificate provided. TLS verification disabled (Phase 2 development mode).")
+		log.Println("This is expected for the initial join process in Phase 2.")
 		client.Transport = &http.Transport{
 			TLSClientConfig: &tls.Config{
 				InsecureSkipVerify: true,