Refactor systemctl services and categories due to alarm bugs

This commit restructures systemctl service definitions and category mappings.

Motivation: Alarm-related bugs revealed inconsistencies in service and role handling.

Preparation step: lays the groundwork for fixing the alarm issues by aligning categories, roles, and service templates.

roles/sys-ctl-mtn-cert-deploy/tasks/main.yml

@@ -0,0 +1,27 @@
+- block:
+  - include_tasks: 01_core.yml
+  - set_fact:
+      run_once_sys_ctl_mtn_cert_deploy: true
+  when: run_once_sys_ctl_mtn_cert_deploy is not defined
+
+- name: "create {{ cert_mount_directory }}"
+  file:
+    path: "{{ cert_mount_directory }}"
+    state: directory
+    mode: "0755"
+  notify: restart tls deploy to docker service
+
+- name: Copy {{ CERT_SYNC_DOCKER_SERVICE_NAME_FULL }}
+  template:
+    src: "{{ CERT_SYNC_DOCKER_BASE }}.service.j2"
+    dest: "/etc/systemd/system/{{ CERT_SYNC_DOCKER_SERVICE_NAME_FULL }}"
+  notify: restart tls deploy to docker service
+
+- name: "include role for sys-timer for {{ CERT_SYNC_DOCKER_SERVICE_NAME_FULL }}"
+  include_role:
+    name: sys-timer
+  vars:
+    on_calendar: "{{ SYS_SCHEDULE_MAINTANANCE_LETSENCRYPT_DEPLOY }}"
+    service_name: "{{ CERT_SYNC_DOCKER_SERVICE_NAME_BASE }}"
+    persistent: "true"
+