Tags for Surgical Runs

Add tags so operators can push config only during a change freeze.

A intermediate Ansible challenge worth 10 points. Solve it hands-on in a real Ansible environment in your browser - no local setup, no fake shells.

The Challenge

Scenario: Change-freeze request CHG-9042 - one log-level setting needs pushing, but the only option is a full run that also reinstalls packages and redeploys the application.

Tag the play so --tags packages, --tags config and --tags deploy each do exactly one thing, --skip-tags packages does the other two, and the maintenance-record pre-task runs on every invocation including tag-filtered ones. Then run check.