Fix PeerTube OIDC plugin automation

- Store oidc_settings as proper YAML dict with correct keys
- Ensure plugin is installed only if missing
- Update DB settings as jsonb and enforce enabled/uninstalled state
- Add CLI enforcement for plugin activation
- Correct task conditions (enable/disable logic) with boolean filters

Ref: https://chatgpt.com/share/68dd1d16-9b34-800f-b2bf-a3fe058f25b1

roles/web-app-peertube/vars/oidc-settings.yml

@@ -1,12 +1,10 @@
-oidc_settings: |
-  {
-    "scope": "openid email profile",
-    "desk-id": "{{ OIDC.CLIENT.ID }}",
-    "discover-url": "{{ OIDC.CLIENT.DISCOVERY_DOCUMENT }}",
-    "desk-secret": "{{ OIDC.CLIENT.SECRET }}",
-    "mail-property": "email",
-    "auth-display-name": "{{ OIDC.BUTTON_TEXT }}",
-    "username-property": "{{ OIDC.ATTRIBUTES.USERNAME }}",
-    "signature-algorithm": "RS256",
-    "display-name-property": "{{ OIDC.ATTRIBUTES.USERNAME }}"
-  }
+oidc_settings:
+  discover-url: "{{ OIDC.CLIENT.DISCOVERY_DOCUMENT }}"
+  client-id: "{{ OIDC.CLIENT.ID }}"
+  client-secret: "{{ OIDC.CLIENT.SECRET }}"
+  scope: "openid email profile"
+  username-property: "{{ OIDC.ATTRIBUTES.USERNAME }}"
+  display-name-property: "{{ OIDC.ATTRIBUTES.USERNAME }}"
+  mail-property: "email"
+  auth-display-name: "{{ OIDC.BUTTON_TEXT }}"
+  signature-algorithm: "RS256"