Show a clear notice on files that are managed with ansible

inventory/group_vars/all.yml

@@ -425,3 +425,7 @@ rbenv_plugins:
   - { name: "rbenv-update",       repo: "https://github.com/rkh/rbenv-update.git",         version: "master" }
   - { name: "rbenv-whatis",       repo: "https://github.com/rkh/rbenv-whatis.git",         version: "master" }
   - { name: "rbenv-use",          repo: "https://github.com/rkh/rbenv-use.git",            version: "master" }
+
+template_notice: |
+  # Managed via ofn-install, any changes will be overwritten.
+  # Please notify @devs of any changes in [#devops](https://openfoodnetwork.slack.com/archives/CEBMTRCNS) (But do not share secrets in public channel!)

roles/app/templates/env.j2

@@ -1,4 +1,4 @@
-# Managed via ofn-install
+{{ template_notice }}
 
 SECRET_TOKEN="{{ secret_token }}"
 

roles/app/templates/postgresql.yml.j2

@@ -1,3 +1,5 @@
+{{ template_notice }}
+
 development:
   adapter: postgresql
   encoding: unicode

roles/app_user/templates/bash_profile.j2

@@ -1,3 +1,5 @@
+{{ template_notice }}
+
 set -o allexport
 . /etc/default/openfoodnetwork
 set +o allexport

roles/app_user/templates/defaults.j2

@@ -1,3 +1,5 @@
+{{ template_notice }}
+
 RAILS_ENV={{ rails_env }}
 
 {% if db_user is defined %}

roles/app_user/templates/sudoers.j2

@@ -1,2 +1,4 @@
+{{ template_notice }}
+
 # app user needs passwordless sudo for concrete commands
 {{ app_user }} ALL=(ALL) NOPASSWD: /bin/systemctl start puma.service, /bin/systemctl stop puma.service, /bin/systemctl restart puma.service,  /bin/systemctl reload puma.service, /bin/systemctl start sidekiq.service, /bin/systemctl stop sidekiq.service, /bin/systemctl restart sidekiq.service