Add daily cron to refresh Media.tag (30-day expiry workaround)

PESetup.exe checks Media.tag last modified date and rejects it after
30 days. Cron job touches all Media.tag files daily at midnight.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

playbook/pxe_server_setup.yml

@@ -391,6 +391,12 @@
         force: no
       loop: "{{ image_types }}"
 
+    - name: "Daily cron to refresh Media.tag (PESetup.exe 30-day expiry check)"
+      copy:
+        content: "0 0 * * * root find {{ samba_share }}/*/Deploy/Control -name Media.tag -exec touch {} +\n"
+        dest: /etc/cron.d/media-tag-refresh
+        mode: '0644'
+
     - name: "Copy WinPE & boot files from USB (skipped if not present)"
       copy:
         src: "{{ usb_root }}/{{ item.src }}"