feat(podman_link): secure postgres access and disable local trust

roles/podman_link/tasks/main.yml

@@ -123,6 +123,21 @@
     - redis-data
     - postgresql-data
 
+# Postgres/Redis runs with UID/GID 999 inside the container
+- name: Podman CDR Link | PATCH | Install PostgreSQL host-based authentication configuration
+  ansible.builtin.template:
+    src: home/pg_hba.conf
+    dest: "/home/{{ podman_link_podman_rootless_user }}/pg_hba_{{ item }}.conf"
+    mode: "0400"
+    owner: "{{ _podman_link_user_subuid_start + 999 }}"
+    group: "{{ _podman_link_user_subgid_start + 999 }}"
+  become: true
+  with_items:
+    - zammad
+    - bridge
+  notify:
+    - Restart Link
+
 # Bridge/Link runs with UID/GID 1000 inside the container (because it's based on the node container)
 - name: Podman CDR Link | PATCH | Create data directory for bridge-whatsapp
   ansible.builtin.file: