Add Ansible playbook to deliver validator-agent to the validators

Run from the jump host: on each validator it updates the git clone in
/opt/cloud-ip-validator, builds the image there, stops and removes the
current container and starts a new one from the new image. Run
parameters live in an env file (deploy/ansible/env/validator-agent.env,
git-ignored, template committed).

The image is built before the running container is touched, so a failed
build leaves the old container running. Hosts are updated in waves
(1, 4, rest) and any failure stops the run. validator_id comes from the
inventory and is checked against the running container before it is
replaced. Only ansible.builtin modules are used, so the validators need
no extra packages.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

deploy/ansible/inventory/hosts.yml

@@ -0,0 +1,69 @@
+# Валидаторы. Имя хоста (validator-N) — это имя ВМ; validator_id в control-api
+# другой (vkiplab-vN) и задаётся переменной validator_id. Соответствие
+# validator-N -> vkiplab-vN предполагается по порядку номеров; сценарий
+# сверяет validator_id с тем, что записано в работающем контейнере на хосте,
+# и при расхождении останавливается ДО замены контейнера.
+all:
+  children:
+    validators:
+      hosts:
+        validator-1:
+          ansible_host: 10.11.12.161
+          validator_id: vkiplab-v1
+        validator-2:
+          ansible_host: 10.11.12.177
+          validator_id: vkiplab-v2
+        validator-3:
+          ansible_host: 10.11.12.33
+          validator_id: vkiplab-v3
+        validator-4:
+          ansible_host: 10.11.12.41
+          validator_id: vkiplab-v4
+        validator-5:
+          ansible_host: 10.11.12.193
+          validator_id: vkiplab-v5
+        validator-6:
+          ansible_host: 10.11.12.197
+          validator_id: vkiplab-v6
+        validator-7:
+          ansible_host: 10.11.12.198
+          validator_id: vkiplab-v7
+        validator-8:
+          ansible_host: 10.11.12.169
+          validator_id: vkiplab-v8
+        validator-9:
+          ansible_host: 10.11.12.185
+          validator_id: vkiplab-v9
+        validator-10:
+          ansible_host: 10.11.12.186
+          validator_id: vkiplab-v10
+        validator-11:
+          ansible_host: 10.11.12.199
+          validator_id: vkiplab-v11
+        validator-12:
+          ansible_host: 10.11.12.196
+          validator_id: vkiplab-v12
+        validator-13:
+          ansible_host: 10.11.12.194
+          validator_id: vkiplab-v13
+        validator-14:
+          ansible_host: 10.11.12.195
+          validator_id: vkiplab-v14
+        validator-15:
+          ansible_host: 10.11.12.65
+          validator_id: vkiplab-v15
+        validator-16:
+          ansible_host: 10.11.12.189
+          validator_id: vkiplab-v16
+        validator-17:
+          ansible_host: 10.11.12.190
+          validator_id: vkiplab-v17
+        validator-18:
+          ansible_host: 10.11.12.168
+          validator_id: vkiplab-v18
+        validator-19:
+          ansible_host: 10.11.12.191
+          validator_id: vkiplab-v19
+        validator-20:
+          ansible_host: 10.11.12.73
+          validator_id: vkiplab-v20