ops(ansible): harden provisioning and restore automation

Fail before host changes when required deployment variables are missing.

Precreate the PostgreSQL temporary directory and escape Bash syntax during Jinja rendering.

ansible/roles/postgres/tasks/main.yml

@@ -1,4 +1,12 @@
 ---
+- name: Create PostgreSQL Ansible temporary directory
+  ansible.builtin.file:
+    path: /var/lib/pgsql/.ansible/tmp
+    state: directory
+    owner: postgres
+    group: postgres
+    mode: "0700"
+
 - name: Initialize PostgreSQL data directory
   ansible.builtin.command:
     argv: [postgresql-setup, --initdb]