Enable gdm without starting it during provisioning

Add enabled_services_only list to services_systemd role for services that
should be enabled at boot but not started immediately. Move gdm to this list
on Arch to avoid starting the display manager mid-provisioning.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

ansible/inventory/group_vars/arch.yml

@@ -129,10 +129,12 @@ enabled_services:
   - avahi-daemon
   - bluetooth
   - cups
-  - gdm
   - libvirtd
   - ufw
 
+enabled_services_only:
+  - gdm
+
 desktop_systemd_user_services:
   - syncthing.service
   - rclone-pcloud.service

ansible/roles/services_systemd/tasks/main.yml

@@ -18,3 +18,12 @@
   loop: "{{ host_enabled_services | default([]) }}"
   loop_control:
     label: "{{ item }}"
+
+- name: Enable systemd services without starting them
+  tags: [services, packages]
+  ansible.builtin.systemd:
+    name: "{{ item }}"
+    enabled: true
+  loop: "{{ enabled_services_only | default([]) }}"
+  loop_control:
+    label: "{{ item }}"