Add container-aware execution logic and CI stability fixes

- Introduce global IS_CONTAINER flag based on ansible_virtualization facts
- Skip systemd-based handlers and tasks when running inside containers
- Extend EXCLUDED_ROLES list in GitHub Actions test-deploy workflow
- Ensure docker.sock is mounted for all CI deploy stages
- Improve sys-svc-docker by suppressing service restarts inside containers
- Add meta: flush_handlers to properly trigger delayed docker restarts
- Update sys-service handlers with container guards
- Update sys-timer tasks to avoid systemctl inside CI containers
- Enhance drv-non-free role with Manjaro detection and mhwd fallback warning
- Skip swapfile generation in containers
- Minor service template fixes and cleanup in proxy.conf.j2

Details and discussion: https://chatgpt.com/share/6930a4ca-56f4-800f-9b3d-4791f040a03b

group_vars/all/00_general.yml

@@ -112,4 +112,12 @@ HCAPTCHA_ENABLED:  "{{ (CAPTCHA.HCAPTCHA.KEY   | default('') | length > 0)
 # Applications which are allways required
 WEBSERVER_CORE_APPLICATIONS: 
   - web-svc-logout
-  - web-svc-cdn
+  - web-svc-cdn
+
+# Global flag for detecting containerized environments
+IS_CONTAINER: >-
+  {{
+    (ansible_virtualization_role | default('') == 'guest')
+    and
+    (ansible_virtualization_type | default('') in ['docker', 'podman', 'lxc', 'container'])
+  }}