fix: add remove_orphans to docker compose tasks

Ensures removed services (vaultwarden, mailserver, snappymail)
are automatically stopped on next deploy.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

roles/services/tasks/main.yml

@@ -37,6 +37,7 @@
     project_src: "{{ services_root }}"
     state: present
     pull: never
+    remove_orphans: true
   retries: 3
   delay: 15
   register: compose_result

roles/tools/tasks/main.yml

@@ -39,3 +39,4 @@
     project_src: "{{ tools_root }}"
     state: present
     pull: missing
+    remove_orphans: true