web-app-snipe-it: make APP_FORCE_TLS depend on global TLS flag

- Bind APP_FORCE_TLS to TLS_ENABLED instead of forcing it unconditionally
- Align Snipe-IT TLS behavior with reverse proxy and global TLS configuration
- Fix missing newline at end of vars file

https://chatgpt.com/share/696890d1-0954-800f-8ad7-887562c620d3

roles/web-app-snipe-it/templates/env.j2

@@ -163,7 +163,7 @@ LOG_CHANNEL=stderr
 LOG_MAX_DAYS=10
 APP_LOCKED=false
 APP_CIPHER=AES-256-CBC
-APP_FORCE_TLS=true
+APP_FORCE_TLS={{ TLS_ENABLED | string | lower }}
 GOOGLE_MAPS_API=
 LDAP_MEM_LIM=500M
 LDAP_TIME_LIM=600

roles/web-app-snipe-it/vars/main.yml

@@ -14,4 +14,4 @@ SNIPE_IT_USER:      "www-data"
 
 # Authentification
 SNIPE_IT_OAUTH2_ENABLED:  "{{ applications | get_app_conf(application_id, 'docker.services.oauth2.enabled') }}"
-SNIPE_IT_LDAP_ENABLED:    "{{ applications | get_app_conf(application_id, 'docker.services.ldap.enabled') }}"
+SNIPE_IT_LDAP_ENABLED:    "{{ applications | get_app_conf(application_id, 'docker.services.ldap.enabled') }}"