Add Podman container infrastructure role for containerized services

- Implemented complete Podman infrastructure role following rick-infra patterns
- Minimal installation approach: only install podman, trust Arch dependency management
- Configured with crun runtime for optimal performance and security
- Security-focused: HTTPS-only registries, rootless containers, systemd hardening
- Registry support: docker.io, quay.io, ghcr.io with secure configurations
- Ready for service-specific users with isolated container environments
- Quadlet support for native systemd container management
- Container-to-host networking via bridge networks with host gateway access
- Foundation for future containerized services (Authentik, Nextcloud)
- Maintains rick-infra philosophy: infrastructure provides foundation, apps manage specifics

site.yml

@@ -11,8 +11,10 @@
     # Infrastructure services
     # - role: postgresql
     #   tags: ['postgresql', 'infrastructure', 'database']
-    - role: valkey
-      tags: ['valkey', 'redis', 'infrastructure', 'cache']
+    # - role: valkey
+    #   tags: ['valkey', 'redis', 'infrastructure', 'cache']
+    - role: podman
+      tags: ['podman', 'containers', 'infrastructure']
     # - role: caddy
     #   tags: ['caddy', 'infrastructure', 'web']