fix(permissions): add missing become:true to all cross-platform /usr/local/bin writes

roles/cloud_cli_prereqs/tasks/linux.yml

@@ -85,6 +85,7 @@
   when:
     - cloud_cli_prereqs_install_gcloud_cli | bool
     - not ansible_check_mode
+  become: true
 
 - name: Verify Azure CLI on Linux
   ansible.builtin.command: az version

roles/vhosts/acp_server_gemini/tasks/config.yml

@@ -47,6 +47,7 @@
     mode: "0755"
   notify: Restart acp gemini
   when: not (acp_gemini_bridge_use_prebuilt | bool)
+  become: true
 
 - name: Restore immutable flag on Gemini bridge binary
   ansible.builtin.command:

roles/vhosts/k8s-node/tasks/system_config.yml

@@ -27,6 +27,7 @@
       hostnamectl set-hostname "{{ inventory_hostname }}"
       hostname "{{ inventory_hostname }}"
       echo -n "{{ inventory_hostname }}" > /etc/hostname
+  become: true
 
 - name: Create systemd service
   copy:

roles/vhosts/modern_it_history/tasks/main.yml

@@ -55,6 +55,7 @@
     owner: root
     group: root
     mode: "0755"
+  become: true
 
 - name: Install Modern IT History update service
   ansible.builtin.template:

roles/vhosts/otel-collector/tasks/main.yml

@@ -45,6 +45,7 @@
     mode: '0755'
     remote_src: true
   when: inventory_hostname in groups[group]
+  become: true
 
 - name: Remove otelcol-contrib archive
   ansible.builtin.file:

roles/vhosts/process_exporter/tasks/main.yml

@@ -31,6 +31,7 @@
     mode: '0755'
     remote_src: true
   when: inventory_hostname in groups[group]
+  become: true
 
 - name: Remove process-exporter archive
   ansible.builtin.file:

roles/vhosts/prometheus/tasks/main.yml

@@ -69,6 +69,7 @@
     - prometheus
     - promtool
   when: inventory_hostname in groups[group]
+  become: true
 
 - name: Create default file_sd config
   ansible.builtin.template:

roles/vhosts/vault/tasks/main.yml

@@ -44,6 +44,7 @@
     - vault_deploy_mode == "standalone"
     - ansible_os_family != 'Darwin'
     - vault_binary_check.rc != 0 or (vault_binary_check.stdout | default('')) is not search(vault_version)
+  become: true
 
 - name: Ensure standalone Vault directories exist
   ansible.builtin.file: