---
# nocheck: run-once

- name: 🚀 Deploy shell dotfiles
  ansible.builtin.template: # nocheck: stack-host-template (per-host user dotfiles, shared user role runs on every host)
    src: "{{ dotfile }}.j2"
    dest: "{{ user_home }}/.{{ dotfile }}"
    owner: "{{ user_username }}"
    group: "{{ user_group }}"
    mode: "0644"
  loop:
    - bashrc
    - bash_profile
  loop_control:
    loop_var: dotfile
    label: ".{{ dotfile }}"

- name: 🔧 Manage SSH authorized_keys (SPOT-only)
  ansible.builtin.include_tasks: 01_ssh_authorized_keys.yml