refactor(services): unify service/timer runtime control and cleanup handling

- Introduce SYS_SERVICE_ALL_ENABLED and SYS_TIMER_ALL_ENABLED runtime flags
- Add SYS_SERVICE_DEFAULT_STATE for consistent default handling
- Ensure all on-failure service names use lowercase software_name
- Load sys-svc-cln-anon-volumes role during Docker cleanup
- Allow forced service refresh when SYS_SERVICE_ALL_ENABLED is true
- Replace ACTIVATE_ALL_TIMERS with SYS_TIMER_ALL_ENABLED
- Use SYS_SERVICE_DEFAULT_STATE in sys-systemctl vars
- Remove redundant MIG build job fail check

Related to service/timer process control refactoring.

roles/web-app-mig/tasks/02_build_data.yml

@@ -6,9 +6,3 @@
   async: "{{ (3600 if ASYNC_ENABLED | bool else omit) | default(omit) }}"
   poll:  "{{ ASYNC_POLL if ASYNC_ENABLED | bool else omit }}"
   register: mig_build_job
-
-- name: Fail if MIG build job did not start
-  fail:
-    msg: >
-      MIG build job failed to start. No job ID returned.
-  when: mig_build_job.ansible_job_id is not defined