Build with Podman and deploy as a rootless Quadlet on emily

- Makefile: podman build/push from the committed tree (git archive HEAD),
  tagged :<commit> + :latest; PLATFORM defaults to linux/arm64 for emily.
- deploy.sh: push the commit first, refuse a dirty tracked tree or
  HEAD != origin/main, then build and deploy that exact commit via
  -e image_tag (rollback = an older commit).
- ansible: target emily with no become. The register role writes hops.network
  (NetworkName=hops_net) plus the caddy.container.d drop-in; the hops role
  installs ~/podman-data/hops and hops.container under systemctl --user with a
  podman healthcheck gate; the caddy role appends the site blocks to the shared
  Caddyfile and reloads.
- Drop the Docker-era network role, community.docker requirements,
  ansible/files templates and docker-compose.yml.
- .containerignore replaces .dockerignore.
- README: Podman build, rootless Quadlet deploy on emily.

ansible/roles/caddy/tasks/main.yaml

@@ -1,26 +1,22 @@
 ---
-- name: Read snippet from template file
-  ansible.builtin.set_fact:
-    caddy_snippet_block: "{{ lookup('template', 'files/Caddyfile.j2') }}"
+# Append Hops n Grains' site blocks to the shared Caddyfile.
+#
+# The Caddyfile is a bind mount into the Caddy container, so Caddy sees the
+# change as soon as the file is written; the handler only asks Caddy to re-read
+# it. That is a reload, not a restart, so the other hosted sites are untouched.
+#
+# blockinfile is idempotent on its own via the marker, so there is no need to
+# slurp the file and compare first — which also matters because slurp *fails*
+# when the Caddyfile does not exist yet, on a host where caddy/playbook.yml has
+# not run.
 
-- name: Read current Caddyfile
-  ansible.builtin.slurp:
-    path: "{{ caddy_caddyfile_path }}"
-  register: caddy_caddyfile_raw
-
-- name: Decode Caddyfile content
-  ansible.builtin.set_fact:
-    caddy_caddyfile_content: "{{ caddy_caddyfile_raw['content'] | b64decode }}"
-
-- name: Check if snippet already exists
-  ansible.builtin.set_fact:
-    caddy_snippet_present: "{{ caddy_snippet_block in caddy_caddyfile_content }}"
-
-- name: Add or update snippet in Caddyfile
+- name: "Add the {{ host }} site blocks to the Caddyfile"
   ansible.builtin.blockinfile:
-    path: "{{ caddy_caddyfile_path }}"
+    path: "{{ caddyfile_path }}"
     marker: "# {mark} Ansible managed Caddy snippet for {{ host }}"
-    block: "{{ caddy_snippet_block }}"
+    block: "{{ snippet_block }}"
     create: true
-    mode: "0644"
-  notify: Reload Caddy configuration
+    owner: "{{ podman_user }}"
+    group: "{{ podman_user }}"
+    mode: '0644'
+  notify: Reload Caddy