Fix tag propagation from include_role to role tasks in site.yml

Tags on include_role only apply to the include statement itself, not
the role's inner tasks, unless passed via apply. Without this,
ansible-pull --tags <role> silently skipped every role task, so no
marker files were ever written during the QEMU agent test.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

site.yml

@@ -4,12 +4,18 @@
   tasks:
     - include_role:
         name: guest-session
+        apply:
+          tags: guest-session
       tags: guest-session
 
     - include_role:
         name: brave-fedora
+        apply:
+          tags: brave-fedora
       tags: brave-fedora
 
     - include_role:
         name: onlyoffice-fedora
+        apply:
+          tags: onlyoffice-fedora
       tags: onlyoffice-fedora