Add global CAPTCHA config and EspoCRM seeder

- Introduce shared CAPTCHA settings and RECAPTCHA_ENABLED/HCAPTCHA_ENABLED flags in group_vars
- Wire reCAPTCHA/hCaptcha credentials into EspoCRM, Keycloak, Listmonk and Nextcloud
- Replace EspoCRM set_flags.php with generic seed_config.php and hook it into entrypoint/env
- Fix run_once handling in sys-ctl-cln-disc-space and minor CSS Jinja spacing issue

https://chatgpt.com/share/692a1d4f-1154-800f-a4ae-bb068aa24a53

roles/web-app-espocrm/tasks/main.yml

@@ -13,10 +13,10 @@
     - docker compose up
     - docker compose build
 
-- name: "Deploy '{{ ESPOCRM_SET_FLAG_SCRIPT_HOST_ABS }}'"
+- name: "Deploy '{{ ESPOCRM_SCRIPT_SEED_HOST_ABS }}'"
   copy:
-    src:  "{{ ESPOCRM_SET_FLAG_SCRIPT_FILE }}" 
-    dest: "{{ ESPOCRM_SET_FLAG_SCRIPT_HOST_ABS }}"
+    src:  "{{ ESPOCRM_SCRIPT_SEED_FILE }}" 
+    dest: "{{ ESPOCRM_SCRIPT_SEED_HOST_ABS }}"
   notify: 
     - docker compose up
     - docker compose build
@@ -47,7 +47,7 @@
 - name: Run flag setter as root (fallback)
   command: >
     docker exec --user root {{ ESPOCRM_CONTAINER }}
-    php {{ ESPOCRM_SET_FLAG_SCRIPT_DOCKER }}
+    php {{ ESPOCRM_SCRIPT_SEED_DOCKER }}
   register: flags_result_root
   changed_when: "'CHANGED' in flags_result_root.stdout"