fix: Enforce winlike/maclike exclusivity with ansible_run_tags check

The 'never' tag doesn't work when role has inherited tags (developer, base).
Added explicit check for tag in ansible_run_tags to ensure:
- winlike tasks only run when --tags winlike is specified
- maclike tasks only run when --tags maclike is specified

Author: Derek

ansible/roles/dfe_developer/tasks/main.yml

@@ -92,15 +92,19 @@
     apply:
       tags: ['winlike']
   tags: ['winlike', 'never']
-  when: dfe_has_gnome | default(false)
+  when:
+    - dfe_has_gnome | default(false)
+    - "'winlike' in ansible_run_tags"
 
 - name: Apply macOS-like GNOME configuration
   ansible.builtin.include_tasks:
     file: gnome_maclike.yml
     apply:
       tags: ['maclike']
   tags: ['maclike', 'never']
-  when: dfe_has_gnome | default(false)
+  when:
+    - dfe_has_gnome | default(false)
+    - "'maclike' in ansible_run_tags"
 
 - name: Configure system-wide GNOME defaults (winlike)
   block:
@@ -138,6 +142,7 @@
   when:
     - dfe_has_gnome | default(false)
     - ansible_distribution in ['Ubuntu', 'Fedora']
+    - "'winlike' in ansible_run_tags"
 
 - name: Configure system-wide GNOME defaults (maclike)
   block:
@@ -175,6 +180,7 @@
   when:
     - dfe_has_gnome | default(false)
     - ansible_distribution in ['Ubuntu', 'Fedora']
+    - "'maclike' in ansible_run_tags"
 
 - name: Install Ghostty terminal
   ansible.builtin.include_tasks: