style(meta/variants): normalize YAML headers and comment indentation

Add the leading `---` document marker and align top-level comments with
the indentation of the YAML block they describe, across 9 web-app role
variant files. No semantic changes.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

roles/web-app-fediwall/meta/variants.yml

@@ -1,3 +1,4 @@
+---
 # Matrix-deploy variant overrides for this role.
 #
 # Variant 0 — defaults from meta/services.yml. Single wall, polls all
@@ -33,9 +34,9 @@
       enabled: true
       shared: true
 
-# Variant 2 (false-pinning) — siblings opted out so the
-# variant-coverage matrix exercises the out-of-group_names branch
-# of every dynamic services flag.
+    # Variant 2 (false-pinning) — siblings opted out so the
+    # variant-coverage matrix exercises the out-of-group_names branch
+    # of every dynamic services flag.
     css:
       enabled: true
       shared: true
@@ -61,53 +62,53 @@
       # Variants replace lists wholesale (not deep-merged), so every
       # wall.config field is restated here — no template fallbacks.
       walls:
-      - slug: default
-        config:
-          servers:
-          - "{{ lookup('domain', 'web-app-mastodon') }}"
-          - "{{ lookup('domain', 'web-app-friendica') }}"
-          tags: []
-          accounts: []
-          loadPublic: true
-          loadFederated: false
-          loadTrends: false
-          languages: []
-          badWords: []
-          hideSensitive: true
-          hideBots: true
-          hideReplies: true
-          hideBoosts: false
-          limit: 20
-          interval: 10
-          title: Fediwall
-          theme: auto
-          showInfobar: true
-          showText: true
-          showMedia: true
-          playVideos: true
-      - slug: mastodon
-        config:
-          servers:
-          - "{{ lookup('domain', 'web-app-mastodon') }}"
-          tags: []
-          accounts: []
-          loadPublic: true
-          loadFederated: false
-          loadTrends: false
-          languages: []
-          badWords: []
-          hideSensitive: true
-          hideBots: true
-          hideReplies: true
-          hideBoosts: false
-          limit: 20
-          interval: 10
-          title: Mastodon
-          theme: auto
-          showInfobar: true
-          showText: true
-          showMedia: true
-          playVideos: true
+        - slug: default
+          config:
+            servers:
+              - "{{ lookup('domain', 'web-app-mastodon') }}"
+              - "{{ lookup('domain', 'web-app-friendica') }}"
+            tags: []
+            accounts: []
+            loadPublic: true
+            loadFederated: false
+            loadTrends: false
+            languages: []
+            badWords: []
+            hideSensitive: true
+            hideBots: true
+            hideReplies: true
+            hideBoosts: false
+            limit: 20
+            interval: 10
+            title: Fediwall
+            theme: auto
+            showInfobar: true
+            showText: true
+            showMedia: true
+            playVideos: true
+        - slug: mastodon
+          config:
+            servers:
+              - "{{ lookup('domain', 'web-app-mastodon') }}"
+            tags: []
+            accounts: []
+            loadPublic: true
+            loadFederated: false
+            loadTrends: false
+            languages: []
+            badWords: []
+            hideSensitive: true
+            hideBots: true
+            hideReplies: true
+            hideBoosts: false
+            limit: 20
+            interval: 10
+            title: Mastodon
+            theme: auto
+            showInfobar: true
+            showText: true
+            showMedia: true
+            playVideos: true
     css:
       enabled: false
       shared: false

roles/web-app-hugo/meta/variants.yml

@@ -1,3 +1,4 @@
+---
 # Matrix-deploy variant overrides for web-app-hugo.
 # See docs/contributing/artefact/files/role/variants.md for the file format.
 
@@ -14,8 +15,8 @@
       enabled: true
       shared: true
 
-# variant pinning every dynamic services.yml flag to false so the
-# matrix also exercises the out-of-group_names branch.
+    # variant pinning every dynamic services.yml flag to false so the
+    # matrix also exercises the out-of-group_names branch.
     css:
       enabled: true
       shared: true

roles/web-app-listmonk/meta/variants.yml

@@ -1,3 +1,4 @@
+---
 # Matrix-deploy variant overrides for web-app-listmonk.
 # See docs/contributing/artefact/files/role/variants.md for the file format.
 
@@ -28,8 +29,8 @@
       enabled: true
       shared: true
 
-# variant pinning every dynamic services.yml flag to false so the
-# matrix also exercises the out-of-group_names branch.
+    # variant pinning every dynamic services.yml flag to false so the
+    # matrix also exercises the out-of-group_names branch.
     css:
       enabled: true
       shared: true

roles/web-app-magento/meta/variants.yml

@@ -1,3 +1,4 @@
+---
 # Matrix-deploy variant overrides for web-app-magento.
 # See docs/contributing/artefact/files/role/variants.md for the file format.
 
@@ -23,8 +24,8 @@
       enabled: true
       shared: true
 
-# variant pinning every dynamic services.yml flag to false so the
-# matrix also exercises the out-of-group_names branch.
+    # variant pinning every dynamic services.yml flag to false so the
+    # matrix also exercises the out-of-group_names branch.
     css:
       enabled: true
       shared: true

roles/web-app-mastodon/meta/variants.yml

@@ -1,3 +1,4 @@
+---
 # Matrix-deploy variant overrides for web-app-mastodon.
 # See docs/contributing/artefact/files/role/variants.md for the file format.
 
@@ -25,8 +26,8 @@
       enabled: true
       shared: true
 
-# variant pinning every dynamic services.yml flag to false so the
-# matrix also exercises the out-of-group_names branch.
+    # variant pinning every dynamic services.yml flag to false so the
+    # matrix also exercises the out-of-group_names branch.
     css:
       enabled: true
       shared: true

roles/web-app-matrix/meta/variants.yml

@@ -1,3 +1,4 @@
+---
 # Matrix-deploy variant overrides for web-app-matrix.
 # See docs/contributing/artefact/files/role/variants.md for the file format.
 
@@ -25,8 +26,8 @@
       enabled: true
       shared: true
 
-# variant pinning every dynamic services.yml flag to false so the
-# matrix also exercises the out-of-group_names branch.
+    # variant pinning every dynamic services.yml flag to false so the
+    # matrix also exercises the out-of-group_names branch.
     css:
       enabled: true
       shared: true

roles/web-app-oauth2-proxy/meta/variants.yml

@@ -1,3 +1,4 @@
+---
 # Matrix-deploy variant overrides for web-app-oauth2-proxy.
 # See docs/contributing/artefact/files/role/variants.md for the file format.
 
@@ -14,8 +15,8 @@
       enabled: true
       shared: true
 
-# variant pinning every dynamic services.yml flag to false so the
-# matrix also exercises the out-of-group_names branch.
+    # variant pinning every dynamic services.yml flag to false so the
+    # matrix also exercises the out-of-group_names branch.
     css:
       enabled: true
       shared: true

roles/web-app-shopware/meta/variants.yml

@@ -1,3 +1,4 @@
+---
 # Matrix-deploy variant overrides for web-app-shopware.
 # See docs/contributing/artefact/files/role/variants.md for the file format.
 
@@ -28,8 +29,8 @@
       enabled: true
       shared: true
 
-# variant pinning every dynamic services.yml flag to false so the
-# matrix also exercises the out-of-group_names branch.
+    # variant pinning every dynamic services.yml flag to false so the
+    # matrix also exercises the out-of-group_names branch.
     css:
       enabled: true
       shared: true
@@ -58,8 +59,8 @@
       enabled: false
       shared: false
 
-# LDAP-only variant: ldap on, oauth2 off so the
-# Playwright spec exercises the LDAP-bind login path.
+    # LDAP-only variant: ldap on, oauth2 off so the
+    # Playwright spec exercises the LDAP-bind login path.
     css:
       enabled: false
       shared: false

roles/web-app-sphinx/meta/variants.yml

@@ -1,3 +1,4 @@
+---
 # Matrix-deploy variant overrides for web-app-sphinx.
 # See docs/contributing/artefact/files/role/variants.md for the file format.
 
@@ -14,8 +15,8 @@
       enabled: true
       shared: true
 
-# variant pinning every dynamic services.yml flag to false so the
-# matrix also exercises the out-of-group_names branch.
+    # variant pinning every dynamic services.yml flag to false so the
+    # matrix also exercises the out-of-group_names branch.
     css:
       enabled: true
       shared: true