Initial vaultwarden role

docker compose based vaultwarden, bound to 127.0.0.1, sign ups off, admin panel only with an argon2 token, SMTP via mailcow.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

templates/opt/vaultwarden/docker-compose.yml.j2

@@ -0,0 +1,11 @@
+name: vaultwarden
+services:
+  vaultwarden:
+    image: {{ vaultwarden_image }}:{{ vaultwarden_version }}
+    restart: unless-stopped
+    env_file:
+      - .env
+    ports:
+      - "127.0.0.1:{{ vaultwarden_http_port }}:80"
+    volumes:
+      - {{ vaultwarden_data_location }}:/data