Configure ArgoCD for private repo access

- Update repo URLs from HTTPS placeholder to git@github.com:lazorgurl/homelab.git
- Update container image refs from OWNER to lazorgurl
- Set KUBECONFIG env in Taskfile
- Fix kubeconfig-fetch.sh to auto-detect server IP from inventory
- Fix Ansible: callback plugin, br_netfilter ordering, ssh service name

infra/ansible/roles/hardening/handlers/main.yaml

@@ -1,5 +1,5 @@
 ---
 - name: restart sshd
   ansible.builtin.systemd:
-    name: sshd
+    name: ssh
     state: restarted