feat(ai): introduce dedicated AI roles and wiring; clean up legacy AI stack

• Add svc-ai category under roles and load it in constructor stage

• Create new 'svc-ai-ollama' role (vars, tasks, compose, meta, README) and dedicated network

• Refactor former AI stack into separate app roles: web-app-flowise and web-app-openwebui

• Add web-app-minio role; adjust config (no central DB), meta (fa-database, run_after), compose networks include, volume key

• Provide user-focused READMEs for Flowise, OpenWebUI, MinIO, Ollama

• Networks: add subnets for web-app-openwebui, web-app-flowise, web-app-minio; rename web-app-ai → svc-ai-ollama

• Ports: rename ai_* keys to web-app-openwebui / web-app-flowise; keep minio_api/minio_console

• Add group_vars/all/17_ai.yml (OLLAMA_BASE_LOCAL_URL, OLLAMA_LOCAL_ENABLED)

• Replace hardcoded include paths with path_join in multiple roles (svc-db-postgres, sys-service, sys-stk-front-proxy, sys-stk-full-stateful, sys-svc-webserver, web-svc-cdn, web-app-keycloak)

• Remove obsolete web-app-ai templates/vars/env; split Flowise into its own role

• Minor config cleanups (CSP flags to {}, central_database=false)

https://chatgpt.com/share/68d15cb8-cf18-800f-b853-78962f751f81

roles/web-app-flowise/templates/env.j2

@@ -0,0 +1,15 @@
+# LiteLLM
+LITELLM_MASTER_KEY=dummy-key
+LITELLM_CONFIG=/etc/litellm/config.yaml
+
+# Flowise
+PORT={{ FLOWISE_PORT_INTERNAL }}
+FLOWISE_USERNAME=admin
+FLOWISE_PASSWORD=admin
+DATABASE_PATH=/root/.flowise
+FLOWISE_FILE_STORAGE_PATH=/root/.flowise/storage
+
+# Qdrant + LiteLLM/Ollama:
+QDRANT_URL={{ FLOWISE_QDRANT_INTERNAL_URL }}
+OPENAI_API_BASE={{ FLOWISE_LITELLM_INTERNAL_URL }}/v1
+OPENAI_API_KEY=dummy-key