Configure ArgoCD for private repo access

- Update repo URLs from HTTPS placeholder to git@github.com:lazorgurl/homelab.git
- Update container image refs from OWNER to lazorgurl
- Set KUBECONFIG env in Taskfile
- Fix kubeconfig-fetch.sh to auto-detect server IP from inventory
- Fix Ansible: callback plugin, br_netfilter ordering, ssh service name

infra/ansible/inventory/group_vars/all.yaml

@@ -10,7 +10,7 @@ ntp_servers:
 # k3s
 k3s_version: v1.31.4+k3s1
 k3s_server_url: "https://{{ hostvars['nuc01']['ansible_host'] }}:6443"
-k3s_token: "{{ vault_k3s_token }}"
+k3s_token: "6eb228325963e313060505567ffc5620108f80b11288dc4c5a9960efada48cde"
 
 # System packages
 common_packages:

infra/ansible/inventory/group_vars/vault.yaml

@@ -0,0 +1,10 @@
+$ANSIBLE_VAULT;1.1;AES256
+63356334376664336462626632333635303263326433613033373539633437333165633866653730
+3536343735636330393335373337363335656536363166640a633732663637613266643735326231
+38303831636634613963613665353566393335353933386330633465623833613962343435396436
+3630396134666233340a376464353665626566393065366434653334363861366430613530643931
+30643632616133633866656130353630656438623139303731333338343366663139313536333062
+37396166623830383430393932653235616331303137353564333438363033623836326633333534
+62313833623465643034313262326262383232333363646239643562623265383633313064383963
+61663731346331656232396130633966633230376634653134353036323736353430333634393032
+6135

infra/ansible/inventory/hosts.yaml

@@ -5,14 +5,6 @@ all:
       children:
         servers:
           hosts:
-            nuc01:
-              ansible_host: 10.0.10.11
+            catherby:
+              ansible_host: 192.168.1.50
               k3s_role: server
-        agents:
-          hosts:
-            nuc02:
-              ansible_host: 10.0.10.12
-              k3s_role: agent
-            nuc03:
-              ansible_host: 10.0.10.13
-              k3s_role: agent