Fix Display sync loop, PPKG deployment, dnsmasq cron, dpkg configure

- Monitor-IntuneProgress: Display PCs skip DSC phases entirely (no SAS
  token, no DSCInstall.log), complete after Phase 1 identity. Renderer
  hides Phase 2-5 for Display type.
- Playbook: deploy PPKG files and run-enrollment.ps1 from USB to
  enrollment share. Bump dnsmasq restart cron from 15s to 30s.
- build-usb.sh: copy enrollment/ directory (PPKGs) onto USB if present.
- user-data: add dpkg --configure -a after offline .deb install to fix
  packages left in unconfigured state (cron, systemd-timesyncd).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

autoinstall/user-data

@@ -55,6 +55,7 @@ autoinstall:
           cp /mnt/cidata/packages/*.deb /tmp/
           dpkg -i /tmp/*.deb 2>/dev/null || true
           dpkg -i /tmp/*.deb 2>/dev/null || true
+          dpkg --configure -a 2>/dev/null || true
           if command -v nmcli >/dev/null; then
             systemctl enable NetworkManager
           fi
@@ -78,6 +79,7 @@ autoinstall:
         if compgen -G "/mnt/usb/packages/*.deb" > /dev/null; then
           dpkg -i /mnt/usb/packages/*.deb 2>/dev/null || true
           dpkg -i /mnt/usb/packages/*.deb 2>/dev/null || true
+          dpkg --configure -a 2>/dev/null || true
         fi
         if [ -f /mnt/usb/playbook/pxe_server_setup.yml ]; then
           cd /mnt/usb/playbook