Migrate SonarQube to sn.e-cosplay.fr, rotate badge token, drop OWASP Dependency-Check, update deploy host

- .env, .env.test, ansible/env.local.j2: point SONARQUBE_URL to https://sn.e-cosplay.fr
- ansible/vault.yml, .env: rotate sonarqube_badge_token to new value
- .gitea/workflows/ci.yml, sonarqube.yml: remove OWASP Dependency-Check steps and force sonar.host.url via CLI args
- sonar-project.properties: drop dependencyCheck report paths
- .gitea/workflows/deploy.yml: switch SSH target from 34.90.187.4 to 152.228.222.133

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.env.test

@@ -4,7 +4,7 @@ APP_SECRET='$ecretf0rt3st'
 DATABASE_URL="postgresql://app:secret@pgbouncer:6432/e_ticket?serverVersion=16&charset=utf8"
 MEILISEARCH_URL=http://meilisearch:7700
 MEILISEARCH_API_KEY=e_ticket
-SONARQUBE_URL=https://sn.esy-web.dev
+SONARQUBE_URL=https://sn.e-cosplay.fr
 SONARQUBE_BADGE_TOKEN=test
 SONARQUBE_PROJECT_KEY=e-ticket
 STRIPE_SK=sk_test_fake