GRM-19: add molecule tests for template content, deregister, and update workflows
- template-content: Verifies rendered systemd template contains correct
directives for docker mode (Type=oneshot, RemainAfterExit=yes) and
prune service/timer content.
- deregister: Installs runner, creates fake .runner file, runs deregister
tasks, verifies .runner file is removed.
- update: Installs docker and binary runners, runs update tasks, verifies
image/binary and data directories remain intact after update.
These scenarios bridge gaps where the deregister task file and update
workflows were not covered by existing molecule tests.