Add container-aware execution logic and CI stability fixes

- Introduce global IS_CONTAINER flag based on ansible_virtualization facts
- Skip systemd-based handlers and tasks when running inside containers
- Extend EXCLUDED_ROLES list in GitHub Actions test-deploy workflow
- Ensure docker.sock is mounted for all CI deploy stages
- Improve sys-svc-docker by suppressing service restarts inside containers
- Add meta: flush_handlers to properly trigger delayed docker restarts
- Update sys-service handlers with container guards
- Update sys-timer tasks to avoid systemctl inside CI containers
- Enhance drv-non-free role with Manjaro detection and mhwd fallback warning
- Skip swapfile generation in containers
- Minor service template fixes and cleanup in proxy.conf.j2

Details and discussion: https://chatgpt.com/share/6930a4ca-56f4-800f-9b3d-4791f040a03b

.github/workflows/test-deploy.yml

@@ -15,8 +15,17 @@ jobs:
     env:
       # The following roles will be ignored in the tests
       EXCLUDED_ROLES: >
-        drv-lid-switch
-
+        drv-lid-switch,
+        svc-net-wireguard-core,
+        svc-net-wireguard-firewalled,
+        svc-net-wireguard-plain,
+        svc-opt-keyboard-color,
+        svc-opt-ssd-hdd,
+        web-app-bridgy-fed,
+        web-app-oauth2-proxy,
+        web-app-postmarks,
+        web-app-socialhome,
+        web-svc-xmpp,
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -29,6 +38,7 @@ jobs:
       - name: First deploy (normal + debug)
         run: |
           docker run --network=host --rm \
+            -v /var/run/docker.sock:/var/run/docker.sock \
             -e EXCLUDED_ROLES="$EXCLUDED_ROLES" \
             infinito:latest \
             /bin/sh -lc '
@@ -52,6 +62,7 @@ jobs:
       - name: Second deploy (--reset --debug)
         run: |
           docker run --network=host --rm \
+            -v /var/run/docker.sock:/var/run/docker.sock \
             -e EXCLUDED_ROLES="$EXCLUDED_ROLES" \
             infinito:latest \
             /bin/sh -lc '
@@ -74,6 +85,7 @@ jobs:
       - name: Third deploy (async deploy – no debug)
         run: |
           docker run --network=host --rm \
+            -v /var/run/docker.sock:/var/run/docker.sock \
             -e EXCLUDED_ROLES="$EXCLUDED_ROLES" \
             infinito:latest \
             /bin/sh -lc '