Refactor Akaunting role and CSP handling

- Improved CSP filter to properly include web-svc-cdn and use protocol-aware domains
- Added Todo.md with redis and OIDC notes
- Enhanced Akaunting role config with CSP flags and redis option
- Updated schema to include app_key validation
- Reworked tasks to handle first-run marker logic cleanly
- Fixed docker-compose template (marker, healthcheck, setup flag)
- Expanded env.j2 with cache, email, proxy, and redis options
- Added javascript.js.j2 template for SSO warning
- Introduced structured vars for Akaunting role
- Removed deprecated update-repository-with-files.yml task

See conversation: https://chatgpt.com/share/68af00df-2c74-800f-90b6-6ac5b29acdcb

roles/web-app-akaunting/config/main.yml

@@ -7,11 +7,26 @@ features:
   css:              true
   desktop:          true
   central_database: true
-  logout:           true 
+  logout:           true
+  javascript:       true
 server:
   domains:
     canonical:
       - "accounting.{{ PRIMARY_DOMAIN }}"
+  csp:
+    flags:
+      script-src-elem:
+        unsafe-inline:  true
+      script-src:
+        unsafe-inline:  true
+        unsafe-eval:    true
+      style-src:
+        unsafe-inline:  true
+    whitelist:
+      font-src:
+        - "data:"
+      connect-src:
+        - https://akaunting.com
 docker:
   services:
     database:
@@ -22,6 +37,8 @@ docker:
       image:   docker.io/akaunting/akaunting 
       version: latest
       name:    akaunting
+    redis:
+      enabled: false # Set to true to activate redis for akaunting
   volumes: 
     data: akaunting_data
 credentials: {}