--- # No handlers needed - restorecon is applied directly in tasks/main.yml