Fix theyvoteforyou_foreman sudoers task using template module

[benrfairless]

Description

The Ansible task "Allow deploy user to control application services" in the theyvoteforyou role used the copy module, which only searches the role's files/ directory. Commit 25d76f8b moved theyvoteforyou_foreman into the role's templates/ directory, so copy could no longer find it. The task failed on every run, halting the play and skipping all subsequent theyvoteforyou tasks.

This switches the task from copy to the template module (which searches templates/), matching the equivalent task in the planningalerts role. The file now also contains a {{ bundle_path }} variable that needs rendering, so template is required rather than optional. The dest is set to an explicit filename because template, unlike copy, does not append the source basename when dest is a directory.

Motivation and Context

Fixes #598. Without this, the theyvoteforyou role cannot complete a run against the server.

How Has This Been Tested?

• Checked affected area manually on my own / staging system
  • Ran ansible-lint roles/internal/theyvoteforyou/tasks/main.yml — passes (only the expected informational notice about the custom yamllint config).
  • Confirmed bundle_path is defined in group_vars/all.yml, so the template renders.
  • Verified the fix mirrors the working planningalerts deploy_service_control task (template + explicit dest filename).
• Ran automated tests on my own system
• Confirmed it passed the GitHub actions tests

Screenshots (if appropriate):

N/A

Types of Changes

• Bug fix (non-breaking change that fixes an issue)
• New feature (non-breaking change that adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)
• Documentation

Checklist:

• My code follows the code style of this project.
• My change requires a change to the documentation.
• I have updated the documentation accordingly.

---

Assisted-by: Claude Code/claude-opus-4-8. AI-generated changes reviewed by the PR author

[ianheggie-oaf]

Thanks for fixing my mistake, but there is (now) a merge conflict to be resolved.

[ianheggie-oaf]

theyvoteforyou_foreman should have a .j2 extension to follow recently established convention for template files