honcho: add honcho_deriver_autostart flag (default: false)

- New variable honcho_deriver_autostart controls service state/enabled
- honcho_deriver_enabled still controls whether Quadlet is created
- Default autostart=false after discovering deriver burns tokens autonomously
- Service is created but stopped/disabled; can be started manually if needed

ansible/roles/honcho/tasks/deriver.yml

@@ -21,14 +21,16 @@
     daemon_reload: true
   when: honcho_deriver_quadlet.changed
 
-- name: Ensure Honcho deriver container is started and enabled
+- name: Ensure Honcho deriver service exists but is disabled by default
   ansible.builtin.systemd:
     name: "{{ honcho_deriver_container_name }}.service"
-    state: started
-    enabled: true
+    state: "{{ 'started' if honcho_deriver_autostart | bool else 'stopped' }}"
+    enabled: "{{ honcho_deriver_autostart | bool }}"
 
-- name: Restart Honcho deriver on Quadlet change
+- name: Restart Honcho deriver on Quadlet change (only if autostart enabled)
   ansible.builtin.systemd:
     name: "{{ honcho_deriver_container_name }}.service"
     state: restarted
-  when: honcho_deriver_quadlet.changed
+  when:
+    - honcho_deriver_quadlet.changed
+    - honcho_deriver_autostart | bool