Implement initial BookWyrm role

- Removed obsolete TODO.md
- Added config/main.yml with service, feature, CSP, and registration settings
- Added schema/main.yml defining vaulted SECRET_KEY (alphanumeric)
- Added tasks/main.yml to load stateful stack
- Added Dockerfile.j2 ensuring data/media dirs
- Added docker-compose.yml.j2 with application, worker, redis, volumes
- Added env.j2 with registration, secrets, DB, Redis, OIDC support
- Extended vars/main.yml with BookWyrm variables and OIDC, Docker, Redis settings
- Updated meta/main.yml with logo and run_after dependencies

Ref: https://chatgpt.com/share/68b6c060-3a0c-800f-89f8-e114a16a4a80

roles/web-app-bookwyrm/config/main.yml

@@ -0,0 +1,37 @@
+credentials: {}
+docker:
+  services:
+    database:
+      enabled:  true
+    redis:
+      enabled:  true
+    application:
+      image:    bookwyrm/bookwyrm
+      version:  latest
+      name:     bookwyrm
+    worker:
+      enabled:  true
+  volumes:
+    data:       "bookwyrm_data"
+    media:      "bookwyrm_media"
+features:
+  matomo:           true
+  css:              true
+  desktop:          true
+  central_database: true
+  logout:           true
+  oidc:             false
+  ldap:             false
+server:
+  csp:
+    whitelist: {}
+    flags: {}
+  domains:
+    canonical:
+      - "book.{{ PRIMARY_DOMAIN }}"
+    aliases:
+      - "bookwyrm.{{ PRIMARY_DOMAIN }}"
+rbac:
+  roles: {}
+registration_open: false
+allow_invite_request: false