Move app-specific tasks to the 'app' role