Reorganize ansible-sdp into per-concern task files; ansible-lint production-clean
- Split install.yml/cron.yml/dependencies.yml and the monitoring role into thin
orchestrators plus single-purpose phase files; extract shared steps into
tasks/common/ (fetch_sdp, fetch_binaries, run_mkdirs, copy_ssl,
configure_broker, sudoers).
- Full best-practices pass: FQCN, true/false, quoted modes, changed_when, loops,
document-start markers; fill both roles' meta; add .ansible-lint.
- RedHat parity: parameterized EPEL enable, dnf, full upgrade, sysctl/bbr tuning.
- Collapse the 12 journal-rotation cron tasks to one; consolidate duplicate
download/broker logic; fix broken tests/test.yml role reference.
- Validated ansible-lint clean at the production profile (ansible-core 2.21 /
python 3.12) and ansible-playbook --syntax-check OK.