refactor: consolidate all roles into ansible/roles/ and update ansible.cfg

- Move all roles from playbooks/roles/ to roles/
- Update roles_path in ansible.cfg
- Add cast user to common role
- Create standalone podman role
- Add semaphore role with Podman + Quadlet support

ansible/roles/step-ca/templates/compose.yaml.j2

@@ -0,0 +1,24 @@
+---
+# Managed by Ansible — do not edit manually
+# Smallstep step-ca — SSH & X.509 Certificate Authority
+
+services:
+  step-ca:
+    image: {{ stepca_image }}:{{ stepca_image_tag }}
+    container_name: {{ stepca_container_name }}
+    restart: unless-stopped
+    ports:
+      - "{{ stepca_listen_port }}:{{ stepca_listen_port }}"
+    volumes:
+      - {{ stepca_data_dir }}:/home/step
+    environment:
+      - DOCKER_STEPCA_INIT_NAME={{ stepca_ca_name }}
+      - DOCKER_STEPCA_INIT_DNS_NAMES={{ stepca_dns_names }}
+      - DOCKER_STEPCA_INIT_REMOTE_MANAGEMENT={{ stepca_remote_management | lower }}
+      - DOCKER_STEPCA_INIT_SSH={{ stepca_ssh_enabled | lower }}
+    networks:
+      - {{ stepca_docker_network }}
+
+networks:
+  {{ stepca_docker_network }}:
+    external: true