Make all templates local, ensure ssh keys for amd64 builds are generated on first boot

ansible/deploy-butter-portal.yml

@@ -43,6 +43,14 @@
         group: root
         mode: '0644'
 
+    - name: Template portal change manager service file
+      ansible.builtin.template:
+        src: templates/change-manager.service.j2
+        dest: /lib/systemd/system/change-manager.service
+        owner: root
+        group: root
+        mode: '0644'
+
     - name: Template nginx config
       ansible.builtin.template:
         src: templates/nginx-config.j2
@@ -57,6 +65,12 @@
         dest: /etc/systemd/system/multi-user.target.wants/butterbox-portal.service
         state: link
 
+    - name: Enable change manager by symlink
+      ansible.builtin.file:
+        src: /lib/systemd/system/change-manager.service
+        dest: /etc/systemd/system/multi-user.target.wants/change-manager.service
+        state: link
+
     - name: Ensure butter_user owns portal directory
       ansible.builtin.file:
         path: "/home/{{ butter_user }}/butter-portal"