fix(frontend): make verify_tls helper text spell out the MITM tradeoff

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

frontend/src/components/C2ConfigCard.tsx

@@ -182,7 +182,8 @@ export function C2ConfigCard({ engagementId }: C2ConfigCardProps): JSX.Element {
               </label>
             </div>
             <p className="text-[12px] text-graphite">
-              Leave unchecked for lab Mythic with self-signed certificates.
+              Uncheck only for lab Mythic with self-signed certificates. Disabling
+              verification exposes the API token to MITM.
             </p>
           </div>