chore: qmd version bump, macOS container runtime deps, ignore inventory pycache

- roles/vhosts/common: add docker/docker-compose/colima to macOS brew deps
  (headless container runtime for qmd PG memory-bridge tests)
- roles/vhosts/qmd: bump qmd_version
- .gitignore: ignore inventory/__pycache__/

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.gitignore

@@ -1,4 +1,5 @@
 xfce-secrets.yml
+inventory/__pycache__/
 .playwright-mcp/
 .env
 .artifacts/

roles/vhosts/common/defaults/main.yml

@@ -22,8 +22,18 @@ enable_common: true
 # macOS (Darwin) baseline: shared Homebrew CLI prerequisites used by helper
 # scripts across roles (e.g. jq is required by vault's init_vault_admin.sh).
 # macOS ships curl/base64 already; jq is not present by default.
+#
+# docker/docker-compose/colima provide a headless container runtime on macOS
+# (colima runs the Docker daemon in a lightweight VM; the docker formula is the
+# CLI only, no Docker Desktop). Needed for container workloads such as the qmd
+# PostgreSQL memory-bridge integration tests (test/pg-compose.yml). Each formula
+# installs a /opt/homebrew/bin/<name> binary, so the task's `creates` check stays
+# idempotent. After install, start the runtime once with `colima start`.
 common_darwin_brew_packages:
   - jq
+  - docker
+  - docker-compose
+  - colima
 
 common_firewall:
   enabled: true

roles/vhosts/qmd/defaults/main.yml

@@ -3,7 +3,7 @@ qmd_user: "{{ ansible_env.USER | default('ubuntu') }}"
 qmd_group: "{{ 'staff' if ansible_os_family == 'Darwin' else (ansible_env.USER | default('ubuntu')) }}"
 qmd_home: "{{ ansible_env.HOME | default('/home/' + qmd_user) }}"
 qmd_source_repo: "https://github.com/ai-workspace-services/qmd.git"
-qmd_version: "6021ea34ac27ac9b5c9a7d655500544917c801dd"
+qmd_version: "236c83a5f38d860fbf56829ba4e188c1fa2ae52b"
 qmd_source_dir: "{{ qmd_home }}/.local/src/qmd"
 qmd_runtime_archive: "{{ lookup('ansible.builtin.env', 'QMD_RUNTIME_ARCHIVE') | default('', true) }}"
 qmd_runtime_marker: "{{ qmd_source_dir }}/.runtime-archive-sha256"