Configure ArgoCD for private repo access

- Update repo URLs from HTTPS placeholder to git@github.com:lazorgurl/homelab.git
- Update container image refs from OWNER to lazorgurl
- Set KUBECONFIG env in Taskfile
- Fix kubeconfig-fetch.sh to auto-detect server IP from inventory
- Fix Ansible: callback plugin, br_netfilter ordering, ssh service name

infra/ansible/roles/common/tasks/main.yaml

@@ -20,6 +20,11 @@
     name: "{{ common_packages }}"
     state: present
 
+- name: Load br_netfilter module
+  community.general.modprobe:
+    name: br_netfilter
+    persistent: present
+
 - name: Configure sysctl for k8s
   ansible.posix.sysctl:
     name: "{{ item.key }}"
@@ -33,11 +38,6 @@
     - { key: fs.inotify.max_user_instances, value: "512" }
     - { key: fs.inotify.max_user_watches, value: "524288" }
 
-- name: Load br_netfilter module
-  community.general.modprobe:
-    name: br_netfilter
-    persistent: present
-
 - name: Disable swap
   ansible.builtin.command: swapoff -a
   changed_when: false

infra/ansible/roles/hardening/handlers/main.yaml

@@ -1,5 +1,5 @@
 ---
 - name: restart sshd
   ansible.builtin.systemd:
-    name: sshd
+    name: ssh
     state: restarted