Several fixes to xqwatcher role

- Missing dictionary value of PYTHON_REQUIREMENTS
- Mispelling and boolification of aa-enforce/aa-complain mode
- Changed supervisord port to 9003 tro avoid conflict with devpi role
- Added course list to with_items of aa-enforce task
- Corrected data directory
- Corrected supervisord service name
I generally think of var as the place to put application data, and to me xqwatcher's data is the grader code, but no strong preference. The pragmatic reason for the change is just that that folder wasn't created by the role, but the `var` variant was by the service role.  It seemed to make more sense to me to just move where the courses ended up, but if you prefer `app` for that I can add the directory creation piece.