Fix borgmatic LaunchAgent to work with mise-installed binaries

The LaunchAgent was failing because launchd runs with a minimal PATH
that doesn't include mise-installed binaries or homebrew. This adds:

- Use `mise x` wrapper to run borgmatic (survives version updates)
- Add /opt/homebrew/bin to PATH for borg dependency
- Add ansible tags to indri playbook for targeted role runs

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

ansible/playbooks/indri.yml

@@ -2,8 +2,13 @@
 - name: Configure indri
   hosts: indri
   roles:
-    - prometheus
-    - grafana
-    - kiwix
-    - borgmatic
-    - forgejo
+    - role: prometheus
+      tags: prometheus
+    - role: grafana
+      tags: grafana
+    - role: kiwix
+      tags: kiwix
+    - role: borgmatic
+      tags: borgmatic
+    - role: forgejo
+      tags: forgejo