Fix IPsec path issues: remove trailing slashes and fix test paths

1. Remove trailing slashes from ipsec_config_path and ipsec_pki_path
   in roles/strongswan/defaults/main.yml (causes double slashes)

2. Fix integration test to check correct subdirectories:
   - .p12 files are in ipsec/manual/
   - .mobileconfig files are in ipsec/apple/

3. Fix strongswan service name check (strongswan-starter on Ubuntu 20.04+)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Author: dguido

.github/workflows/integration-tests.yml

@@ -167,14 +167,14 @@ jobs:
             echo "✓ All WireGuard configs generated"
           fi
 
-          # IPsec configs
+          # IPsec configs (p12 in manual/, mobileconfig in apple/)
           if [[ "${{ matrix.vpn_type }}" == "ipsec" || "${{ matrix.vpn_type }}" == "both" ]]; then
             for user in alice bob; do
-              if [ ! -f "configs/localhost/ipsec/${user}.p12" ]; then
+              if [ ! -f "configs/localhost/ipsec/manual/${user}.p12" ]; then
                 echo "✗ Missing IPsec certificate for ${user}"
                 exit 1
               fi
-              if [ ! -f "configs/localhost/ipsec/${user}.mobileconfig" ]; then
+              if [ ! -f "configs/localhost/ipsec/apple/${user}.mobileconfig" ]; then
                 echo "✗ Missing IPsec mobile config for ${user}"
                 exit 1
               fi

roles/strongswan/defaults/main.yml

@@ -1,6 +1,6 @@
 ---
-ipsec_config_path: configs/{{ IP_subject_alt_name }}/ipsec/
-ipsec_pki_path: "{{ ipsec_config_path }}/.pki/"
+ipsec_config_path: configs/{{ IP_subject_alt_name }}/ipsec
+ipsec_pki_path: "{{ ipsec_config_path }}/.pki"
 strongswan_shell: /usr/sbin/nologin
 strongswan_home: /var/lib/strongswan
 strongswan_service: "{{ 'strongswan-starter' if ansible_facts['distribution_version'] is version('20.04', '>=') else 'strongswan' }}"