SCRUM-140: Bump fulfillr images to 20260717.0202; snipcart_api_key via EXTRA_VARS

The import-only Snipcart key renders empty on normal deploys (import
endpoint 503s); it was injected via EXTRA_VARS just for the historical
refund re-import and is now blanked again.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

ansible/roles/podman/tasks/main.yml

@@ -78,13 +78,13 @@
 
 - import_tasks: containers/debyltech/fulfillr.yml
   vars:
-    image: git.debyl.io/debyltech/fulfillr:20260716.2108
+    image: git.debyl.io/debyltech/fulfillr:20260717.0202
   tags: debyltech, fulfillr
 
 # Staging back-office (fulfillr-dev.debyltech.com) — same image, staging Turso config.
 - import_tasks: containers/debyltech/fulfillr-dev.yml
   vars:
-    image: git.debyl.io/debyltech/fulfillr:20260716.2108
+    image: git.debyl.io/debyltech/fulfillr:20260717.0202
   tags: debyltech, fulfillr-dev
 
 - import_tasks: containers/debyltech/uptime-kuma.yml
@@ -109,7 +109,7 @@
 
 - import_tasks: containers/home/gregtime.yml
   vars:
-    image: localhost/greg-time-bot:3.9.24
+    image: localhost/greg-time-bot:3.9.25
   tags: gregtime
 
 - import_tasks: containers/home/zomboid.yml

ansible/roles/podman/templates/fulfillr/dev.json.j2

@@ -7,6 +7,9 @@
 {
   "easypost_api_key": "{{ fulfillr_dev_easypost_api_key }}",
   "stripe_api_key": "{{ fulfillr_dev_stripe_api_key }}",
+  {# Snipcart key only for the one-time historical re-import (SCRUM-140); injected
+     via EXTRA_VARS at deploy time, renders empty (import disabled) on normal deploys. #}
+  "snipcart_api_key": "{{ fulfillr_snipcart_api_key | default('') }}",
   "backinstock_table": "debyltech-backinstock-dev",
   "cases_table": "debyltech-cases-dev",
   "tickets_table": "debyltech-tickets-dev",

ansible/roles/podman/templates/fulfillr/production.json.j2

@@ -7,6 +7,9 @@
 {
   "easypost_api_key": "{{ easypost_api_key }}",
   "stripe_api_key": "{{ fulfillr_prod_stripe_api_key }}",
+  {# Snipcart key only for the one-time historical re-import (SCRUM-140); injected
+     via EXTRA_VARS at deploy time, renders empty (import disabled) on normal deploys. #}
+  "snipcart_api_key": "{{ fulfillr_snipcart_api_key | default('') }}",
   "backinstock_table": "debyltech-backinstock-prod",
   "cases_table": "debyltech-cases-prod",
   "tickets_table": "debyltech-tickets-prod",