web-app-xwiki: admin bootstrap & REST/extension install fixes

• Guard admin tasks via XWIKI_SSO_ENABLED
• Create admin using XWikiUsers object API
• Wait for REST without DW redirect
• Install OIDC/LDAP via /rest/jobs (+verify)
• Mount xwiki.cfg/properties under Tomcat WEB-INF
• Build REST URLs with url_join; enable DW auto bootstrap + repos

https://chatgpt.com/share/68c42502-a5cc-800f-b05a-a1dbe48f014d

roles/web-app-xwiki/tasks/_flush_config.yml

@@ -13,13 +13,16 @@
 - name: "flush docker compose for '{{ application_id }}'"
   meta: flush_handlers
 
-- name: "Wait until XWiki REST is ready"
+- name: "Wait until XWiki REST is ready (no DW redirect)"
   uri:
     url: "{{ XWIKI_REST_BASE }}"
-    status_code: [200, 401, 302]
+    status_code: [200, 401]
     return_content: no
-  changed_when: false
+    follow_redirects: none
   register: xwiki_rest_up
+  changed_when: false
   retries: 60
   delay: 5
-  until: xwiki_rest_up is succeeded
+  until:
+    - xwiki_rest_up is succeeded
+    - (xwiki_rest_up.redirected is not defined) or (not xwiki_rest_up.redirected)