Implement initial BookWyrm role

- Removed obsolete TODO.md
- Added config/main.yml with service, feature, CSP, and registration settings
- Added schema/main.yml defining vaulted SECRET_KEY (alphanumeric)
- Added tasks/main.yml to load stateful stack
- Added Dockerfile.j2 ensuring data/media dirs
- Added docker-compose.yml.j2 with application, worker, redis, volumes
- Added env.j2 with registration, secrets, DB, Redis, OIDC support
- Extended vars/main.yml with BookWyrm variables and OIDC, Docker, Redis settings
- Updated meta/main.yml with logo and run_after dependencies

Ref: https://chatgpt.com/share/68b6c060-3a0c-800f-89f8-e114a16a4a80

roles/web-app-bookwyrm/templates/Dockerfile.j2

@@ -0,0 +1,7 @@
+FROM "{{ BOOKWYRM_IMAGE }}:{{ BOOKWYRM_VERSION }}"
+
+# Place for optional plugins/patches
+# COPY ./patches/ /app/patches/
+
+# Ensure media/data exist (UID/GID depend on upstream; keep generic)
+RUN mkdir -p /app/data /app/media && chown -R 1000:1000 /app/data /app/media