Add container-aware execution logic and CI stability fixes

- Introduce global IS_CONTAINER flag based on ansible_virtualization facts
- Skip systemd-based handlers and tasks when running inside containers
- Extend EXCLUDED_ROLES list in GitHub Actions test-deploy workflow
- Ensure docker.sock is mounted for all CI deploy stages
- Improve sys-svc-docker by suppressing service restarts inside containers
- Add meta: flush_handlers to properly trigger delayed docker restarts
- Update sys-service handlers with container guards
- Update sys-timer tasks to avoid systemctl inside CI containers
- Enhance drv-non-free role with Manjaro detection and mhwd fallback warning
- Skip swapfile generation in containers
- Minor service template fixes and cleanup in proxy.conf.j2

Details and discussion: https://chatgpt.com/share/6930a4ca-56f4-800f-9b3d-4791f040a03b

roles/sys-service/handlers/main.yml

@@ -7,6 +7,7 @@
   async:  "{{ system_service_async }}"
   poll:   "{{ system_service_poll }}"
   listen: refresh systemctl service
+  when: not (IS_CONTAINER | bool)
 
 - name: "Set systemctl service state"
   systemd:
@@ -15,5 +16,7 @@
   become: true
   async:  "{{ system_service_async }}"
   poll:   "{{ system_service_poll }}"
-  when:   not (system_service_suppress_flush | bool)
+  when:   
+    - not (system_service_suppress_flush | bool)
+    - not (IS_CONTAINER | bool)
   listen: refresh systemctl service