fix(cleanup,config): xen tmp cleanup, tpm2 fallback warning, add code comments

roles/configuration/tasks/extras.yml

@@ -12,6 +12,8 @@
     marker: "# {mark} CUSTOM VIM CONFIG"
   failed_when: false
 
+# Tuned for VM workloads: low swappiness, aggressive writeback, large page-cluster
+# for zram. Override post-bootstrap via the linux role or sysctl if needed.
 - name: Add memory tuning parameters
   ansible.builtin.blockinfile:
     path: /mnt/etc/sysctl.d/90-memory.conf
@@ -41,7 +43,7 @@
     mode: "0644"
 
 - name: Copy Custom Shell config
-  ansible.builtin.template:
-    src: custom.sh.j2
+  ansible.builtin.copy:
+    src: custom.sh
     dest: /mnt/etc/profile.d/custom.sh
     mode: "0644"