refactor: consolidate all roles into ansible/roles/ and update ansible.cfg

- Move all roles from playbooks/roles/ to roles/
- Update roles_path in ansible.cfg
- Add cast user to common role
- Create standalone podman role
- Add semaphore role with Podman + Quadlet support

ansible/roles/step-ca/templates/env.j2

@@ -0,0 +1,4 @@
+# Managed by Ansible — do not edit manually
+STEPCA_DNS_NAMES={{ stepca_dns_names }}
+STEPCA_SSH_ENABLED={{ stepca_ssh_enabled | lower }}
+STEPCA_REMOTE_MANAGEMENT={{ stepca_remote_management | lower }}