Add enabled_services_only list to services_systemd role for services that
should be enabled at boot but not started immediately. Move gdm to this list
on Arch to avoid starting the display manager mid-provisioning.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>