Wire conditional restart for Traefik and update setup-all to force restarts

- Traefik's service list entry now uses the `traefik_restart_necessary`
  variable (computed by the Traefik role) instead of hardcoded `true`,
  so it is only restarted when its config, systemd unit, or image changed.

- `just setup-all` now passes
  `devture_systemd_service_manager_conditional_restart_enabled=false`
  to force unconditional restarts, matching its "full setup" semantics.

- Document the conditional restart behavior in docs/just.md.

Some benchmarks follow for `just install-service traefik -l matrix.example.com`
when Traefik settings did not change and a restart is not really necessary:

- Before:
  - total time: 56 seconds 🐌
  - Traefik restarted: yes ❌
  - Services that depend on Traefik restarted: yes; all of them restarted ❌

- After:
  - total time: 27 seconds ⚡
  - Traefik restarted: no ✅
  - Services that depend on Traefik restarted: no; none restarted ✅

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

justfile

@@ -53,7 +53,7 @@ install-service service *extra_args:
     --extra-vars=group={{ service }} {{ extra_args }}
 
 # Runs the playbook with --tags=setup-all,ensure-matrix-users-created,start and optional arguments
-setup-all *extra_args: (run-tags "setup-all,ensure-matrix-users-created,start" extra_args)
+setup-all *extra_args: (run-tags "setup-all,ensure-matrix-users-created,start" "--extra-vars=devture_systemd_service_manager_conditional_restart_enabled=false" extra_args)
 
 # Runs the playbook with the given list of arguments
 run +extra_args: