fix(semaphore): force container restart when Quadlet template changes

Quadlet regenerates the systemd unit on daemon-reload but does not
restart the running container — the process keeps its original
environment until restarted. Add explicit 'state: restarted' tasks
gated on the Quadlet template's changed status so env-var updates
actually take effect on re-runs.

ansible/roles/semaphore/tasks/postgres.yml

@@ -33,3 +33,11 @@
   retries: 30
   delay: 2
   changed_when: false
+
+# Same Quadlet-restart caveat as Semaphore: regenerated unit but the
+# running container keeps its original env until forced.
+- name: Restart PostgreSQL on Quadlet change
+  ansible.builtin.systemd:
+    name: "{{ semaphore_postgres_container_name }}.service"
+    state: restarted
+  when: postgres_quadlet.changed