Added extra systemd service arguments to synapse workers and proxy companion

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/3133

Regression since 4ed522e8fe

Bring default config inline with upstream

add missing ' in config

Resolve #2296 by Explicitly telling Draupnir and Mjolnir where to find their configs.

This should resolve [#2296](https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2296) by fixing the noted issue.

This also paves the way for in the future working on D4A mode but that would require a rework to how these variables are done.

The new version drops support for the legacy basic auth method
(`prometheus_postgres_exporter_basicauth_*` variables).

The new version drops support for the legacy basic auth method
(`prometheus_node_exporter_basicauth_*` variables).

Previously, we only enabled metrics when the playbook was installing
Prometheus (as indicated by `prometheus_enabled`).

We are exposing metrics when `matrix_metrics_exposure_enabled` is
toggled to `true` though, but people need to toggle various
`_metrics_enabled` variables to make services actually serve metrics.
No more. If `matrix_metrics_exposure_enabled` is `true`, we'll
automatically enable metrics for all services.

Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2448

fix setting root path because the script moved one level up in 2f457b2a

* Update configuring-playbook-traefik.md

Added docu on how to host another server behind traefik.

* Added MASH and docker options

Added the link to mash and the compatibility adjustments.

Mentioned the prefered method with docker containers.

Some rephrasing to make clear, the intended guide ios for reverse proxying non-docker services.

* Improve wording in configuring-playbook-traefik.md

---------

Co-authored-by: Slavi Pantaleev <slavi@devture.com>

chore(deps): update joseluisq/static-web-server docker tag to v2.25.0

Updated nginx proxy fronting with NPM guide

Most addons live in the same network by default (matrix-addons) right now,
so this network would have usually been created by some other addon.

Howevre, if this is the only addon someone uses, it may have remained
uncreated causing a problem.

Mautrix-Telegram bridge config update

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/3100

Related to: https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/3100

I believe `specialized-workers` is a better name than `room-workers`,
because when enabled, 4 different types of specialized workers are
created:

- Room workers
- Sync workers
- Client readers
- Federation readers

Only one of these is called room-workers.

In the future, more specialized workers may be added, making the
`room-workers` preset name an even poorer choice.

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/3100

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/3100

Until now, the validation check would only get tripped up
if generic workers are used, combined with at least one EACH
other type of specialized workers.

This means that someone doing this:

```
matrix_synapse_workers_preset: one-of-each
matrix_synapse_workers_client_reader_workers_count: 5
```

.. would not have triggered this safety check.

Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/3100

Room workers

Updated the 'nginx reverse-proxy fronting' documentation with a guide for Nginx Proxy Manager, as you can't use the pre-existing nginx matrix.conf

Update vectorim/element-web Docker tag to v1.11.55

Hookshot wants a trailing slash for this route.

If we let Hookshot redirect, it goes to `/widgetapi/v1/static/`,
instead of `/hookshot/widgetapi/v1/static/`, so we take this matter into our
own hands.

Public URLs are like: `/hookshot/widgetapi/v1/static/`
.. which get translated to requests for: `/widgetapi/v1/static/`

Previously, we were stripping the whole `/hookshot/widgetapi` prefix,
which is wrong.

Some of these variables were ending up configuring services to expect
certificates.. yet there's no way they could get them.