fix(firewall): open ports 80 and 443 in firewalld drop zone

The docker role only opened Swarm ports (2377, 7946, 4789).
HTTP and HTTPS were missing, making SWAG unreachable from outside.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

ansible/roles/docker/tasks/main.yml

@@ -41,6 +41,8 @@
     immediate: yes
     state: enabled
   loop:
+    - 80/tcp
+    - 443/tcp
     - 2377/tcp
     - 7946/tcp
     - 7946/udp