Refactor and cleanup OIDC, desktop, and web-app roles

- Improved OIDC variable definitions (12_oidc.yml)
- Added account/security/profile URLs
- Restructured web-app-desktop tasks and JS handling
- Introduced oidc.js and iframe.js with runtime loader
- Fixed nginx.conf, LDAP, and healthcheck templates spacing
- Improved Lua injection for CSP and snippets
- Fixed typos (WordPress, receive, etc.)
- Added silent-check-sso nginx location

Conversation: https://chatgpt.com/share/68ae0060-4fac-800f-9f02-22592a4087d3

roles/sys-service/tasks/01_core.yml

@@ -1,7 +1,6 @@
 - name: Include dependency 'sys-daemon'
   include_role:
     name: sys-daemon
-    public: true
   when: run_once_sys_daemon is not defined
   
 - name: "reset (if enabled)"