pgbouncer: investigate adding server_tls_cert/key for verify_full

[dbist]

i'm not sure how pgbouncer's auth and security configs work but i'm not sure the combination of client_tls_sslmode=verify_full and no server_tls_cert/key_file makes sense. are you intending to use cert auth to pgbouncer but password auth to the backend?