Fix Trivy security vulnerabilities and sync README with .env.example for MultiAgentQnA

Signed-off-by: gopal-raj-suresh <gopal.raj.dummugudupu@cloud2labs.com>

Author: gopal-raj-suresh

core/helm-charts/observability/habana-exporter/habana-metrics.yml

@@ -25,7 +25,7 @@ spec:
         operator: "Exists"
         effect: "NoSchedule"
       # Required for network monitoring
-      hostNetwork: true
+      hostNetwork: false
       containers:
       - name: metric-exporter
         image: vault.habana.ai/gaudi-metric-exporter/metric-exporter:1.20.1-97
@@ -34,7 +34,8 @@ spec:
         - name: LD_LIBRARY_PATH
           value: "/usr/lib/habanalabs"
         securityContext:
-          privileged: true
+          privileged: false
+          readOnlyRootFilesystem: true
         volumeMounts:
           - name: pod-resources
             mountPath: /var/lib/kubelet/pod-resources

sample_solutions/MultiAgentQnA/README.md

@@ -233,6 +233,10 @@ INFERENCE_MODEL_NAME=meta-llama/Llama-3.1-8B-Instruct
 #   Set this to: api.example.com (domain without https://)
 # If using a public domain, set any placeholder value like: not-needed
 LOCAL_URL_ENDPOINT=not-needed
+
+# SSL Verification Settings
+# Set to false only for dev with self-signed certs
+VERIFY_SSL=true
 EOF
 ```
 
@@ -275,6 +279,10 @@ INFERENCE_MODEL_NAME=meta-llama/Llama-3.1-8B-Instruct
 #   Set this to: api.example.com (domain without https://)
 # If using a public domain, set any placeholder value like: not-needed
 LOCAL_URL_ENDPOINT=not-needed
+
+# SSL Verification Settings
+# Set to false only for dev with self-signed certs
+VERIFY_SSL=true
 ```
 
 **Important Configuration Notes:**