Accept cloud-init rc 2 (recoverable errors) in the k3s play

PVE's cloud-init user-data triggers a deprecation warning that makes
`cloud-init status --wait` exit 2 even though provisioning succeeded.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

ansible/mgmt.yml

@@ -91,7 +91,10 @@
   tasks:
     - name: Wait for cloud-init to finish (apt lock, SSH keys)
       ansible.builtin.command: cloud-init status --wait
+      register: cloud_init
       changed_when: false
+      # rc 2 = done with recoverable errors; PVE's user-data triggers a deprecation warning ('user' as string)
+      failed_when: cloud_init.rc not in [0, 2]
 
     - name: Install qemu-guest-agent
       ansible.builtin.apt: