allow to enable security in devmode

[maxandersen]

trafficstars

with ngrok security checks should still work -but for now security is always disabled.

related to #610

[gsmet]

How do you configure things for ngrok exactly?

[maxandersen]

See https://docs.quarkiverse.io/quarkus-ngrok/dev/index.html until and including stable url.

I also use the next step so I don't have to the domain step in every app but is not required.

So in short:

Add ngrok ext. Get auth token and set it (.token) Get stable domain url and set it (.domain)

Run in Quarkus dev.

[gsmet]

Apparently smee.io can also push the rawdata now so we could probably enable security now: https://github.com/probot/smee.io/commit/8c33d74f250c910b3deda2e498b11ade5645c580

[gsmet]

Did some work here but still pending some smee.io changes: https://github.com/quarkiverse/quarkus-github-app/pull/659