feat(baseline): do not expect global become true

roles/baseline/tasks/dns_resolver.yml

@@ -1,10 +1,12 @@
 ---
 - name: DNS Resolver | PATCH | Install systemd-resolved
+  become: true
   ansible.builtin.dnf:
     name: systemd-resolved
     state: latest
 
 - name: DNS Resolver | PATCH | Ensure systemd-resolved is in use
+  become: true
   ansible.builtin.systemd_service:
     name: systemd-resolved
     state: started
@@ -12,12 +14,14 @@
     masked: false
 
 - name: DNS Resolver | PATCH | Remove loopback address entries containing the hostname from /etc/hosts
+  become: true
   ansible.builtin.lineinfile:
     path: /etc/hosts
     regexp: '^(127\.0\.0\.1|::1)\s.*{{ inventory_hostname }}'
     state: absent
 
 - name: DNS Resolver | PATCH | Enable DNSSEC and disable unwanted resolved features
+  become: true
   ansible.builtin.copy:
     src: resolved.conf
     dest: /etc/systemd/resolved.conf
@@ -25,9 +29,9 @@
     group: root
     mode: "0644"
   notify: "Restart systemd-resolved"
-  become: true
 
 - name: DNS Resolver | PATCH | Ensure /etc/systemd/system/systemd-resolved.service.d exists
+  become: true
   ansible.builtin.file:
     path: /etc/systemd/system/systemd-resolved.service.d
     state: directory
@@ -36,6 +40,7 @@
     mode: "0755"
 
 - name: DNS Resolver | PATCH | Disable resolved record synthesising
+  become: true
   ansible.builtin.copy:
     src: systemd-resolved-override.conf
     dest: /etc/systemd/system/systemd-resolved.service.d/override.conf
@@ -43,4 +48,3 @@
     group: root
     mode: "0644"
   notify: "Restart systemd-resolved"
-  become: true