feat: Swapped tofu init scripting for ansible scripting

ansible/roles/deploy/templates/runners-docker-compose.yml.j2

@@ -0,0 +1,35 @@
+# Generated by Ansible from dev_runner_count - do not hand-edit.
+# To change the number of runners, edit dev_runner_count in
+# ansible/group_vars/role_dev.yml and re-run playbooks/deploy.yml.
+# To change their shape, edit this template instead.
+#
+# GITEA_RUNNER_REGISTRATION_TOKEN is intentionally left as a compose variable
+# (not baked in here) - services/dev/spinup.sh generates a fresh token and
+# writes it to Runners/.env immediately before starting these containers.
+#
+# /data lives on dev's volume ({{ data_dir }}) so runner identity survives a
+# server rebuild - baked in directly rather than via .env, since Runners/.env
+# is already reserved for the registration token above and gets overwritten
+# on every deploy.
+services:
+{% for i in range(1, dev_runner_count + 1) %}
+  runner-{{ i }}:
+    image: gitea/act_runner:latest
+    container_name: gitea_runner_{{ i }}
+    volumes:
+      - ./config.yaml:/config.yaml
+      - {{ data_dir }}/gitea_runner_{{ i }}:/data
+      - /var/run/docker.sock:/var/run/docker.sock
+    networks:
+      - proxy
+    environment:
+      CONFIG_FILE: /config.yaml
+      GITEA_INSTANCE_URL: "https://git.luke-else.co.uk"
+      GITEA_RUNNER_REGISTRATION_TOKEN: "${GITEA_RUNNER_REGISTRATION_TOKEN}"
+      GITEA_RUNNER_NAME: "CICD#{{ i }}"
+    restart: unless-stopped
+{% endfor %}
+
+networks:
+  proxy:
+    external: true