feat(semaphore): complete quadlet deployment for PostgreSQL + Semaphore

- Add quadlet tasks and handlers for modern rootless Podman deployment
- Fix broken Jinja in semaphore.container.j2
- Add proper 0777 permissions handling for rootless
- Support semaphore_use_postgres toggle with fallback to legacy BoltDB path

ansible/roles/semaphore/templates/semaphore-postgres.container.j2

@@ -0,0 +1,19 @@
+[Unit]
+Description=Semaphore PostgreSQL
+After=network-online.target
+Wants=network-online.target
+
+[Container]
+Image={{ semaphore_postgres_image }}
+ContainerName={{ semaphore_postgres_container_name }}
+Volume={{ semaphore_postgres_volume }}:/var/lib/postgresql/data:Z
+Environment=POSTGRES_USER={{ semaphore_postgres_user }}
+Environment=POSTGRES_PASSWORD={{ vault_semaphore_database_password }}
+Environment=POSTGRES_DB={{ semaphore_postgres_db }}
+Restart=always
+
+[Service]
+Restart=always
+
+[Install]
+WantedBy=multi-user.target