fix: turn Identity Verification off when remote params omit jwt_required

A missing jwt_required field previously set the flag off only when it was still unknown, so an app that had Identity Verification on stayed on after it was disabled remotely. Treat a missing field as off unconditionally so the on->off transition is actually detected.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: nan-li

iOS_SDK/OneSignalSDK/OneSignalUser/Source/OneSignalUserManagerImpl.swift

@@ -699,15 +699,12 @@ extension OneSignalUserManagerImpl {
     }
 
     /**
-     This is called when remote params does not return the property `IOS_JWT_REQUIRED`.
-     It is likely this feature is not enabled for the app, so we will assume it is off.
-     However, don't overwrite the value if this has already been set.
+     This is called when remote params does not return the property `IOS_JWT_REQUIRED`. A missing value means Identity Verification
+     is off for this app, so we set it to off unconditionally — including when it was previously on. The `requiresUserAuth` didSet only
+     fires listeners when the value actually changes, so re-confirming an existing off value is a no-op.
      */
     @objc
     public func remoteParamsReturnedUnknownRequiresUserAuth() {
-        guard jwtConfig.isRequired == nil else {
-            return
-        }
         OneSignalLog.onesignalLog(.LL_DEBUG, message: "remoteParamsReturnedUnknownRequiresUserAuth called")
         jwtConfig.isRequired = false
     }