Shopfloor PC type system, webapp enhancements, slim Blancco GRUB

- Shopfloor PC type menu (CMM, WaxAndTrace, Keyence, Genspect, Display, Standard)
- Baseline scripts: OpenText CSF, Start Menu shortcuts, network/WinRM, power/display
- Standard type: eDNC + MarkZebra with 64-bit path mirroring
- CMM type: Hexagon CLM Tools, PC-DMIS 2016/2019 R2
- Display sub-type: Lobby vs Dashboard
- Webapp: enrollment management, image config editor, UI refresh
- Upload-Image.ps1: robocopy MCL cache to PXE server
- Download-Drivers.ps1: Dell driver download pipeline
- Slim Blancco GRUB EFI (10MB -> 660KB) for old hardware compat
- Shopfloor display imaging guide docs

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

playbook/pxe_server_setup.yml

@@ -37,11 +37,12 @@
       - gea-standard
       - gea-engineer
       - gea-shopfloor
-      - gea-shopfloor-mce
       - ge-standard
       - ge-engineer
       - ge-shopfloor-lockdown
       - ge-shopfloor-mce
+    shopfloor_types:
+      - gea-shopfloor
     deploy_subdirs:
       - Applications
       - Control
@@ -298,6 +299,36 @@
         state: directory
         mode: '0777'
 
+    - name: "Create enrollment packages directory"
+      file:
+        path: /srv/samba/enrollment
+        state: directory
+        mode: '0777'
+
+    - name: "Deploy shopfloor setup scripts to enrollment share"
+      copy:
+        src: "{{ usb_mount }}/shopfloor-setup/"
+        dest: /srv/samba/enrollment/shopfloor-setup/
+        mode: '0755'
+        directory_mode: '0755'
+      ignore_errors: yes
+
+    - name: "Create BIOS update directory on enrollment share"
+      file:
+        path: /srv/samba/enrollment/BIOS
+        state: directory
+        mode: '0755'
+
+    - name: "Deploy BIOS check script and manifest"
+      copy:
+        src: "{{ usb_mount }}/shopfloor-setup/BIOS/{{ item }}"
+        dest: /srv/samba/enrollment/BIOS/{{ item }}
+        mode: '0644'
+      loop:
+        - check-bios.cmd
+        - models.txt
+      ignore_errors: yes
+
     - name: "Create image upload staging directory"
       file:
         path: /home/pxe/image-upload
@@ -348,6 +379,15 @@
           force user = root
           comment = Blancco Drive Eraser reports
 
+          [enrollment]
+          path = /srv/samba/enrollment
+          browseable = yes
+          read only = no
+          guest ok = no
+          valid users = pxe-upload
+          force user = root
+          comment = GCCH bulk enrollment packages
+
           [image-upload]
           path = /home/pxe/image-upload
           browseable = yes
@@ -357,6 +397,9 @@
           force user = pxe
           force group = pxe
           comment = PXE image upload staging area
+          oplocks = no
+          level2 oplocks = no
+          strict sync = yes
 
     - name: "Create Samba users (pxe-upload and blancco)"
       shell: |
@@ -392,6 +435,15 @@
         force: no
       loop: "{{ image_types }}"
 
+    - name: "Deploy shopfloor unattend.xml template"
+      copy:
+        src: "{{ usb_mount }}/FlatUnattendW10-shopfloor.xml"
+        dest: "{{ samba_share }}/{{ item }}/Deploy/FlatUnattendW10.xml"
+        mode: '0644'
+        force: no
+      loop: "{{ shopfloor_types }}"
+      ignore_errors: yes
+
     - name: "Daily cron to create/refresh Media.tag for all images"
       copy:
         content: |
@@ -635,6 +687,7 @@
           Environment=CLONEZILLA_SHARE=/srv/samba/clonezilla
           Environment=WEB_ROOT={{ web_root }}
           Environment=BLANCCO_REPORTS=/srv/samba/blancco-reports
+          Environment=ENROLLMENT_SHARE=/srv/samba/enrollment
           Environment=AUDIT_LOG=/var/log/pxe-webapp-audit.log
           ExecStart=/usr/bin/python3 app.py
           Restart=always