move hold to post downgrade

roles/lib/install-docker.yml

@@ -1,7 +1,4 @@
-  - name: Hold containerd.io package
-    ansible.builtin.dpkg_selections:
-      name: containerd.io
-      selection: hold
+
 
   - name: Install package on Debian 12.x
     apt:
@@ -53,6 +50,7 @@
         - docker-compose-plugin
       state: present
       update_cache: yes
+      allow_downgrade: true
     when:
       - ansible_distribution == "Debian"
       - ansible_distribution_version is version('13', '<')
@@ -66,10 +64,16 @@
         - docker-compose-plugin
       state: present
       update_cache: yes
+      allow_downgrade: true
     when:
       - ansible_distribution == "Debian"
       - ansible_distribution_version is version('13', '>=')
 
+  - name: Hold containerd.io package
+    ansible.builtin.dpkg_selections:
+      name: containerd.io
+      selection: hold
+
   - name: Create docker user
     user:
       name: docker