Refactor docker-compose build logic and pull policy

- Added conditional '--pull' flag on retry in docker-compose build handler, tied to MODE_UPDATE
- Added 'pull_policy: never' to multiple docker-compose service templates to prevent unwanted image pulls
- Fixed minor formatting issues (e.g. Nextcloud volume spacing, WordPress desktop alignment)

Reference: https://chatgpt.com/share/68b0207a-4d9c-800f-b76f-9515885e5183

roles/web-app-elk/templates/docker-compose.yml.j2

@@ -4,6 +4,7 @@
       context: elasticsearch/
       args:
         ELK_VERSION: $ELK_VERSION
+    pull_policy: never
     volumes:
       - type: bind
         source: ./elasticsearch/config/elasticsearch.yml
@@ -27,6 +28,7 @@
       context: logstash/
       args:
         ELK_VERSION: $ELK_VERSION
+    pull_policy: never
     volumes:
       - type: bind
         source: ./logstash/config/logstash.yml
@@ -51,6 +53,7 @@
       context: kibana/
       args:
         ELK_VERSION: $ELK_VERSION
+    pull_policy: never
     volumes:
       - type: bind
         source: ./kibana/config/kibana.yml