WebRCA UI will expect the env var MATOMO_TAG_MANAGER_CONTAINER_URL to exist once the tracking code is added. Update the templates and app.yml to provide this secret from vault before adding the code block.