Ansible: общие переменные перенесены в group_vars/all

- vars/vars.yml → group_vars/all/main.yml, vars/secrets.yml →
  group_vars/all/secrets.yml; boilerplate vars_files убран из всех плейбуков
- имя secrets.yml сохранено намеренно: pre-commit-хук и .crushignore ищут
  слово secret(s) в имени файла
- host_vars инвентаря теперь имеют приоритет над общими переменными

group_vars/all/main.yml

@@ -0,0 +1,20 @@
+---
+host_name: "rivendell"
+primary_user: "major"
+primary_user_uid: 1000
+primary_user_gid: 1001
+
+# Directory for all user binaries and scripts
+bin_prefix: "/usr/local/bin"
+
+# Root directory for application data. Override in inventory if host
+# uses a different path (e.g. external disk mounted elsewhere).
+application_dir: "/srv/applications"
+
+apprise_external_port: 8000
+apprise_external_url: "http://127.0.0.1:{{ apprise_external_port }}"
+
+# Shared HTTP access log written by caddyproxy and consumed by analytics
+# tools (goaccess and so on). Lives under the system log path so it is
+# decoupled from any individual application's data directory.
+caddy_logs_dir: "/var/log/caddy"