Add Ansible playbook for the management cluster (step 1)

VM from Ubuntu cloud image on pv1-1, pinned k3s, cert-manager and
cluster-api-operator via k3s HelmChart CRs, CAPI providers as operator CRs,
kubeconfig fetch + cluster-inspector kubeconfig. Lint passes (production).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

ansible/templates/capi-providers.yaml.j2

@@ -0,0 +1,33 @@
+{% for p in capi_providers %}
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: {{ p.namespace }}
+---
+{% endfor %}
+# Read by CAPMOX v0.9.1 components; the operator does not watch it, so rotating the token
+# means a new Secret name + updated configSecret reference.
+apiVersion: v1
+kind: Secret
+metadata:
+  name: capmox-variables
+  namespace: capmox-system
+type: Opaque
+stringData:
+  PROXMOX_URL: "{{ proxmox_url }}"
+  PROXMOX_TOKEN: "{{ proxmox_token_id }}"
+  PROXMOX_SECRET: "{{ proxmox_token_secret }}"
+{% for p in capi_providers %}
+---
+apiVersion: operator.cluster.x-k8s.io/v1alpha2
+kind: {{ p.kind }}
+metadata:
+  name: {{ p.name }}
+  namespace: {{ p.namespace }}
+spec:
+  version: {{ p.version }}
+{% if p.config_secret is defined %}
+  configSecret:
+    name: {{ p.config_secret }}
+{% endif %}
+{% endfor %}