Refactor systemctl services and categories due to alarm bugs

This commit restructures systemctl service definitions and category mappings.

Motivation: Alarm-related bugs revealed inconsistencies in service and role handling.

Preparation step: lays the groundwork for fixing the alarm issues by aligning categories, roles, and service templates.

roles/sys-ctl-alm-telegram/templates/sys-ctl-alm-telegram.sh.j2

@@ -0,0 +1,14 @@
+#!/bin/bash
+
+# determine host name: try hostname command, otherwise use $HOSTNAME
+if command -v hostname &>/dev/null; then
+  host=$(hostname)
+else
+  host="$HOSTNAME"
+fi
+
+# send the Telegram message
+/usr/bin/curl -s -X POST \
+  "https://api.telegram.org/bot{{ telegram_bot_token }}/sendMessage" \
+  -d chat_id="{{ telegram_chat_id }}" \
+  -d text="service $1 on ${host} failed"

roles/sys-ctl-alm-telegram/templates/sys-ctl-alm-telegram@.service.j2

@@ -0,0 +1,8 @@
+[Unit]
+Description=status Telegram message for %i to user
+
+[Service]
+Type=oneshot
+ExecStart=/bin/bash {{ systemd_telegram_script }} %i
+User=root
+Group=systemd-journal