Fix Display sync loop, PPKG deployment, dnsmasq cron, dpkg configure

- Monitor-IntuneProgress: Display PCs skip DSC phases entirely (no SAS
  token, no DSCInstall.log), complete after Phase 1 identity. Renderer
  hides Phase 2-5 for Display type.
- Playbook: deploy PPKG files and run-enrollment.ps1 from USB to
  enrollment share. Bump dnsmasq restart cron from 15s to 30s.
- build-usb.sh: copy enrollment/ directory (PPKGs) onto USB if present.
- user-data: add dpkg --configure -a after offline .deb install to fix
  packages left in unconfigured state (cron, systemd-timesyncd).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

playbook/pxe_server_setup.yml

@@ -306,6 +306,19 @@
         state: directory
         mode: '0777'
 
+    - name: "Deploy PPKG enrollment packages to enrollment share"
+      shell: cp -f {{ usb_mount }}/enrollment/*.ppkg /srv/samba/enrollment/ 2>/dev/null || true
+      args:
+        warn: false
+      ignore_errors: yes
+
+    - name: "Deploy run-enrollment.ps1 to enrollment share"
+      copy:
+        src: "{{ usb_mount }}/shopfloor-setup/run-enrollment.ps1"
+        dest: /srv/samba/enrollment/run-enrollment.ps1
+        mode: '0644'
+      ignore_errors: yes
+
     - name: "Deploy shopfloor setup scripts to enrollment share"
       copy:
         src: "{{ usb_mount }}/shopfloor-setup/"
@@ -674,7 +687,7 @@
         dest: /etc/cron.d/dnsmasq-restart
         mode: '0644'
         content: |
-          @reboot root /bin/sleep 15 && /usr/bin/systemctl restart dnsmasq.service
+          @reboot root /bin/sleep 30 && /usr/bin/systemctl restart dnsmasq.service
 
     # --- Web Management App (Flask) ---
     - name: "Create webapp directory"