Fix borgmatic LaunchAgent to work with mise-installed binaries

The LaunchAgent was failing because launchd runs with a minimal PATH
that doesn't include mise-installed binaries or homebrew. This adds:

- Use `mise x` wrapper to run borgmatic (survives version updates)
- Add /opt/homebrew/bin to PATH for borg dependency
- Add ansible tags to indri playbook for targeted role runs

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

ansible/playbooks/indri.yml

@@ -2,8 +2,13 @@
 - name: Configure indri
   hosts: indri
   roles:
-    - prometheus
-    - grafana
-    - kiwix
-    - borgmatic
-    - forgejo
+    - role: prometheus
+      tags: prometheus
+    - role: grafana
+      tags: grafana
+    - role: kiwix
+      tags: kiwix
+    - role: borgmatic
+      tags: borgmatic
+    - role: forgejo
+      tags: forgejo

ansible/roles/borgmatic/templates/borgmatic.plist.j2

@@ -7,8 +7,16 @@
 	<false/>
 	<key>Label</key>
 	<string>mcquack.eblume.borgmatic</string>
+	<key>EnvironmentVariables</key>
+	<dict>
+		<key>PATH</key>
+		<string>/opt/homebrew/bin:/usr/bin:/bin</string>
+	</dict>
 	<key>ProgramArguments</key>
 	<array>
+		<string>/opt/homebrew/opt/mise/bin/mise</string>
+		<string>x</string>
+		<string>--</string>
 		<string>borgmatic</string>
 		<string>--config</string>
 		<string>{{ borgmatic_config }}</string>