fix configs

[Stromweld]

🔩 Description: What code changed, and why?

1. fix commented out jvm.options for min/max heap settings for ha opensearch
2. set allow_unsafe_democertificates to default to false
3. update erchef erlang vm settings to match bifrost for scalability
4. fix pg_gateway max_connections not setting haproxy.conf global maxconn which was hardcoded to 1024

⛓️ Related Resources

👍 Definition of Done

👟 How to Build and Test the Change

✅ Checklist

All PRs must tick these:

• I have read the CONTRIBUTING document.
• All commits signed-off for the Developer Certification of Origin.

With occasional exceptions, all PRs from Progress employees must tick these:

• Is the code clear? (complicated code or lots of comments--subdivide and use well-named methods, meaningful variable names, etc.)
• Consistency checked? (user notifications, user prompts, visual patterns, code patterns, variable names)
• Repeated code blocks eliminated? (adapt and reuse existing components, blocks, functions, etc.)
• Spelling, grammar, typos checked? (at a minimum use make spell in any component directory)
• Code well-formatted? (indents, line breaks, etc. improve rather than hinder readability)

All PRs from Progress employees should tick these if appropriate:

• Tests added/updated? (all new code needs new tests)
• Docs added/updated? (all customer-facing changes)

Please add a note next to any checkbox above if you are NOT ticking it.

📷 Screenshots, if applicable

[marcparadise]

I don't think this will hurt, but unless our erlang procs are blocking on a lot of IO, I don't think it will change much. either.