Add change-tracking and restart_necessary computation for:
- matrix-authentication-service (custom role in this repo)
- container-socket-proxy, traefik-certs-dumper, postgres, exim-relay,
  cinny, livekit-server (external roles, bumped in requirements.yml)

Wire all 7 services in group_vars to use their _restart_necessary variable
instead of hardcoded true.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/4776

Supersedes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/4777

Ref:

- https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/4647
- https://github.com/element-hq/matrix-authentication-service/releases/tag/v1.4.0
- https://github.com/element-hq/matrix-authentication-service/pull/5109

Regression since db54063a0c

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/4617

Builds up on top of d0adc8a374

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/4445

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/4445

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/4445

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/4297

Supersedes https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/4300

Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>

Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>

This:

- brings consistency - no more mixing `_name_prefix` and `_registry_prefix`
- adds extensibility - a future patch will allow reconfiguring all registry prefixes for all roles in the playbook

We still have `_docker_` vs `_container_` inconsistencies.
These may be worked on later.

`-t` works on both old and new Docker versions, so it's best to use that.

Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>

- Fix punctuations
- Set the common expression for matrix_authentication_service_config_email_mode

Signed-off-by: Suguru Hirahara <acioustick@noreply.codeberg.org>

This makes it possible to migrate from Synapse when OIDC had been used
and the Synapse user database contains OIDC-sourced users.