Ensure Media.tag exists for all images after import and via cron

Webapp now creates Deploy/Control/Media.tag after every image import.
Cron updated to create (not just touch) Media.tag for any image
directory that has Deploy/Control/.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

playbook/pxe_server_setup.yml

@@ -391,9 +391,12 @@
         force: no
       loop: "{{ image_types }}"
 
-    - name: "Daily cron to refresh Media.tag (PESetup.exe 30-day expiry check)"
+    - name: "Daily cron to create/refresh Media.tag for all images"
       copy:
-        content: "@reboot root find {{ samba_share }}/*/Deploy/Control -name Media.tag -exec touch {} +\n0 0 * * * root find {{ samba_share }}/*/Deploy/Control -name Media.tag -exec touch {} +\n"
+        content: |
+          # Create Media.tag in any image with Deploy/Control/ and refresh existing ones
+          @reboot root for d in {{ samba_share }}/*/Deploy/Control; do [ -d "$d" ] && touch "$d/Media.tag"; done
+          0 0 * * * root for d in {{ samba_share }}/*/Deploy/Control; do [ -d "$d" ] && touch "$d/Media.tag"; done
         dest: /etc/cron.d/media-tag-refresh
         mode: '0644'