refactor: consolidate all roles into ansible/roles/ and update ansible.cfg

- Move all roles from playbooks/roles/ to roles/
- Update roles_path in ansible.cfg
- Add cast user to common role
- Create standalone podman role
- Add semaphore role with Podman + Quadlet support

ansible/roles/dns-manager/defaults/main.yml

@@ -0,0 +1,18 @@
+---
+# Default variables for dns-manager role
+
+# DNS Configuration
+dns_management_enabled: true
+use_hosts_file_fallback: false
+dns_ttl: 360
+dns_propagation_wait: 2
+create_ptr_record: true
+
+# Cluster Configuration (to be provided by calling role)
+# cluster_endpoint: "fastpass.local.mk-labs.cloud"
+# cluster_vip: "10.1.71.53"
+
+# DNS Server Configuration (from group_vars)
+# dns_server: "monorail"
+# base_domain: "local.mk-labs.cloud"
+# vault_technitium_api_key: "{{ vault_technitium_api_key }}"

ansible/roles/dns-manager/tasks/main.yml

@@ -0,0 +1,17 @@
+---
+# role: dns-manager
+# description: Reusable role for managing DNS entries across clusters using Technitium DNS
+# author: mk-labs
+# version: 1.0.0
+
+- name: Create DNS entry using Technitium DNS task
+  ansible.builtin.include_tasks: "{{ playbook_dir }}/tasks/add_technitium_dns_entry.yml"
+
+- name: Wait for DNS propagation
+  ansible.builtin.pause:
+    seconds: "{{ dns_propagation_wait | default(10) }}"
+  when: dns_management_enabled | default(true)
+
+- name: Look up A (IPv4) records for example.org
+  ansible.builtin.debug:
+    msg: "{{ query('community.dns.lookup', 'fastpass') }}"