fix(ansible): anchor root_dir on ansible.cfg to kill vars_files skip warning

root_dir was "{{ inventory_dir }}/../../". inventory_dir is a host-scoped
magic variable that is UNDEFINED during Ansible's early vars_files
evaluation pass, so every `vars_files: - "{{ root_dir }}/..."` entry hit
"skipping vars_files item due to an undefined variable" and silently
skipped before being re-evaluated per-host (the value loaded anyway — a
fragile limp that violates the project's fail-fast rule).

Re-anchor on ansible.cfg's location, which is host-independent and
resolves on the first pass:

  root_dir: "{{ lookup('ansible.builtin.config', 'CONFIG_FILE') | dirname }}"

- 0 "skipping vars_files" warnings across every play and the full
  playbook-main.yml import chain (verified via --list-tasks)
- move-proof: ansible.cfg never moves from the repo root, unlike
  playbook_dir (breaks if a play is relocated)
- one uniform idiom; all 66 root_dir definitions converted across 65
  playbooks; every existing {{ root_dir }} reference works unchanged
- AnsibleStyle.md canonical pattern updated to match, with the WHY
- drive-by: replace a mail-archive citation URL (embedded list email
  tripped the public-repo secret scanner) with the canonical
  bugs.debian.org URL for the same bug

QA: ./scripts/qa-all.bash passes (exit 0).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: LTSCommerce

CLAUDE/AnsibleStyle.md

@@ -12,7 +12,7 @@
   name: TLP Battery Optimisation
   become: true
   vars:
-    root_dir: "{{ inventory_dir }}/../../"
+    root_dir: "{{ lookup('ansible.builtin.config', 'CONFIG_FILE') | dirname }}"
   tasks:
     - name: Install Packages
       ansible.builtin.dnf:

playbooks/imports/optional/archived/play-tlp-battery-optimisation.yml

@@ -5,7 +5,7 @@
   become: true
 
   vars:
-    root_dir: "{{ inventory_dir }}/../../"
+    root_dir: "{{ lookup('ansible.builtin.config', 'CONFIG_FILE') | dirname }}"
 
   tasks:
     # PKG-08 (F44): python3-dnf-plugin-versionlock install removed.

playbooks/imports/optional/common/play-advanced-kernel-management.yml

@@ -4,7 +4,7 @@
   name: Claude DevTools (ccdt) - On-Demand Session Viewer Installation
   become: false
   vars:
-    root_dir: "{{ inventory_dir }}/../../"
+    root_dir: "{{ lookup('ansible.builtin.config', 'CONFIG_FILE') | dirname }}"
     ccdt_repo: "https://github.com/matt1398/claude-devtools"
     ccdt_src_dir: "/opt/claude-devtools"
     ccdt_image: "claude-devtools"

playbooks/imports/optional/common/play-claude-devtools.yml

@@ -19,7 +19,7 @@
   name: Clean Paste — Ctrl+Alt+V clipboard sanitiser
   become: true
   vars:
-    root_dir: "{{ inventory_dir }}/../../"
+    root_dir: "{{ lookup('ansible.builtin.config', 'CONFIG_FILE') | dirname }}"
     clean_paste_binary: "/home/{{ user_login }}/.local/bin/clean-paste"
     clean_paste_lib_dir: "/home/{{ user_login }}/.local/lib/clean-paste"
     clean_paste_registrar: "/home/{{ user_login }}/.local/lib/clean-paste/register-shortcut.py"

playbooks/imports/optional/common/play-clean-paste.yml

@@ -3,7 +3,7 @@
 - hosts: desktop
   become: true
   vars:
-    root_dir: "{{ inventory_dir }}/../../"
+    root_dir: "{{ lookup('ansible.builtin.config', 'CONFIG_FILE') | dirname }}"
   tasks:
     # @see https://pkg.cloudflareclient.com/#rhel
     - name: Install Repo

playbooks/imports/optional/common/play-cloudflare-warp.yml

@@ -9,7 +9,7 @@
   name: Collaboration Tools
   become: true
   vars:
-    root_dir: "{{ inventory_dir }}/../../"
+    root_dir: "{{ lookup('ansible.builtin.config', 'CONFIG_FILE') | dirname }}"
   tasks:
     # ── tmate ──────────────────────────────────────────────────────────────────
     # Instant terminal sharing via SSH URL. Wrapper scripts default to

playbooks/imports/optional/common/play-collaboration.yml

@@ -4,7 +4,7 @@
   name: Compression Helpers - installs `compress` and `uncompress` commands
   become: true
   vars:
-    root_dir: "{{ inventory_dir }}/../../"
+    root_dir: "{{ lookup('ansible.builtin.config', 'CONFIG_FILE') | dirname }}"
     # Pin ouch version for reproducibility. Update deliberately.
     # @see https://github.com/ouch-org/ouch/releases
     ouchVersion: "0.6.1"

playbooks/imports/optional/common/play-compression-helpers.yml

@@ -37,7 +37,7 @@
   name: Install darktable AI Nightly (darktable-ai, with Sony A7V)
   become: true
   vars:
-    root_dir: "{{ inventory_dir }}/../../"
+    root_dir: "{{ lookup('ansible.builtin.config', 'CONFIG_FILE') | dirname }}"
 
     # GitHub releases API for the rolling `nightly` tag.
     dt_ai_release_api: "https://api.github.com/repos/darktable-org/darktable/releases/tags/nightly"

playbooks/imports/optional/common/play-darktable-ai-appimage.yml

@@ -34,7 +34,7 @@
   name: Build and Install Darktable RPM with AI Features (USE_AI=ON)
   become: false
   vars:
-    root_dir: "{{ inventory_dir }}/../../"
+    root_dir: "{{ lookup('ansible.builtin.config', 'CONFIG_FILE') | dirname }}"
 
     # darktable upstream release - bump these together
     darktable_version: "5.4.1"