feat(ai): introduce dedicated AI roles and wiring; clean up legacy AI stack

• Add svc-ai category under roles and load it in constructor stage

• Create new 'svc-ai-ollama' role (vars, tasks, compose, meta, README) and dedicated network

• Refactor former AI stack into separate app roles: web-app-flowise and web-app-openwebui

• Add web-app-minio role; adjust config (no central DB), meta (fa-database, run_after), compose networks include, volume key

• Provide user-focused READMEs for Flowise, OpenWebUI, MinIO, Ollama

• Networks: add subnets for web-app-openwebui, web-app-flowise, web-app-minio; rename web-app-ai → svc-ai-ollama

• Ports: rename ai_* keys to web-app-openwebui / web-app-flowise; keep minio_api/minio_console

• Add group_vars/all/17_ai.yml (OLLAMA_BASE_LOCAL_URL, OLLAMA_LOCAL_ENABLED)

• Replace hardcoded include paths with path_join in multiple roles (svc-db-postgres, sys-service, sys-stk-front-proxy, sys-stk-full-stateful, sys-svc-webserver, web-svc-cdn, web-app-keycloak)

• Remove obsolete web-app-ai templates/vars/env; split Flowise into its own role

• Minor config cleanups (CSP flags to {}, central_database=false)

https://chatgpt.com/share/68d15cb8-cf18-800f-b853-78962f751f81

roles/web-app-flowise/config/main.yml

@@ -0,0 +1,55 @@
+features:
+  matomo:           true
+  css:              true
+  desktop:          true
+  central_database: false
+  logout:           true
+  javascript:       false
+server:
+  domains:
+    canonical:
+      flowise:    "flowise.ai.{{ PRIMARY_DOMAIN }}"
+    aliases: []
+  csp:
+    flags: {}
+      #script-src-elem:
+      #  unsafe-inline:  true
+      #script-src:
+      #  unsafe-inline:  true
+      #  unsafe-eval:    true
+      #style-src:
+      #  unsafe-inline:  true
+    whitelist:
+      font-src: [] 
+      connect-src: [] 
+docker:
+  services:
+    litellm:
+      backup:
+        no_stop_required: true
+      image:   ghcr.io/berriai/litellm
+      version: main-v1.77.3.dynamic_rates
+      name:    litellm
+    qdrant:
+      backup:
+        no_stop_required: true
+      image:   qdrant/qdrant
+      version: latest
+      name:    qdrant
+    flowise:
+      backup:
+        no_stop_required: true
+      image:   flowiseai/flowise:latest
+      version: latest
+      name:    flowise
+    redis:
+      enabled: false
+    database:
+      enabled: false
+    ollama: 
+      enabled: true
+  volumes: 
+    qdrant:     qdrant_data
+    flowise:    flowise_data
+credentials: {}
+