## Why

`ansible.cfg` sets `become = True` globally, which makes the localhost play try to use sudo for local file operations. This fails because the local user may not have passwordless sudo, causing "sudo: a password is required" errors when generating the Surge config.

## What Changes

- Add `become: false` to the "Generate Surge client configuration" play in `site.yml`

## Capabilities

### New Capabilities
<!-- none -->

### Modified Capabilities
<!-- none -->

## Impact

- `site.yml`: add `become: false` to the localhost play