Refactor systemctl services and categories due to alarm bugs

This commit restructures systemctl service definitions and category mappings.

Motivation: Alarm-related bugs revealed inconsistencies in service and role handling.

Preparation step: lays the groundwork for fixing the alarm issues by aligning categories, roles, and service templates.

roles/sys-ctl-mtn-cert-renew/tasks/01_core.yml

@@ -0,0 +1,30 @@
+- name: Include dependencies
+  include_role:
+    name: '{{ item }}'
+  loop:
+  - sys-svc-certbot
+  - srv-web-7-4-core
+  - sys-ctl-alm-compose
+
+- name: install certbot
+  community.general.pacman:
+    name:
+    - certbot-nginx
+    state: present
+
+- name: configure sys-ctl-mtn-cert-renew service
+  template:
+    src: sys-ctl-mtn-cert-renew.service.j2
+    dest: /etc/systemd/system/sys-ctl-mtn-cert-renew{{ SYS_SERVICE_SUFFIX }}
+  notify: reload certbot service
+
+- name: "set 'service_name' to '{{ role_name }}'"
+  set_fact:
+    service_name: "{{ role_name }}"
+
+- name: "include role for sys-timer for {{ service_name }}"
+  include_role:
+    name: sys-timer
+  vars:
+    on_calendar: "{{ SYS_SCHEDULE_MAINTANANCE_LETSENCRYPT_RENEW }}"
+    persistent: "true"

roles/sys-ctl-mtn-cert-renew/tasks/main.yml

@@ -0,0 +1,4 @@
+- block:
+    - include_tasks: 01_core.yml
+    - include_tasks: utils/run_once.yml
+  when: run_once_sys_ctl_mtn_cert_renew is not defined