Initial Ansible automation for hobbs.farm infrastructure

Complete IaC covering:
- 14 roles: common, docker, traefik, vaultwarden, monitoring, media, matrix,
  home_assistant, frigate, adguard, gitea, semaphore, openclaw, security, backup
- Inventory for all hosts (Peggy, Bart, Yoda, NAS, Firewalla)
- Stack playbooks: core-infrastructure, monitoring, media, communication,
  automation, smarthome, security-hardening
- Maintenance playbooks: update-containers, backup, health-check
- Production Docker Compose templates with Traefik labels
- Security hardening (sysctl, auditd, UFW, fail2ban)
- Automated backups with retention policy

ansible.cfg

@@ -0,0 +1,25 @@
+[defaults]
+inventory = inventory/hosts.yml
+roles_path = roles
+remote_user = glyptic
+private_key_file = ~/.ssh/id_docker_server
+host_key_checking = False
+retry_files_enabled = False
+stdout_callback = yaml
+callbacks_enabled = timer, profile_tasks
+forks = 10
+timeout = 30
+gathering = smart
+fact_caching = jsonfile
+fact_caching_connection = .fact_cache
+fact_caching_timeout = 3600
+
+[privilege_escalation]
+become = True
+become_method = sudo
+become_user = root
+become_ask_pass = False
+
+[ssh_connection]
+pipelining = True
+ssh_args = -o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=no