feat: golden-image build support (cloud-init on EL, selinux relabel, SSH wait)

roles/global_defaults/tasks/_normalize_system.yml

@@ -140,6 +140,7 @@
         pbkdf: "{{ system_raw.luks.pbkdf | string }}"
       # --- Feature flags ---
       features:
+        cloud_init: "{{ system_raw.features.cloud_init | default(false) | bool }}"
         cis:
           enabled: "{{ system_raw.features.cis.enabled | bool }}"
           profile: "{{ system_raw.features.cis.profile | default('default') | string }}"