Molecule idempotence check ansible

Re-run the role and fail if any task reports changed — catches non-idempotent tasks

molecule idempotence
more ansible all 56 commands →