Change all potentially destructive jobs to manual by default

This patch changes the default for all jobs that perform potentially
destructive or state-changing actions to manual.

This only affects the job templates, not the opinionated pipeline
templates.

Closes https://gitlab.com/components/opentofu/-/issues/117

Changelog: changed