Reorganize provision playbook

Split server-specific configs out into server role

roles/server/tasks/main.yaml

@@ -0,0 +1,13 @@
+---
+- name: Disable sudo password for WHEEL group
+  when: ansible_distribution == "Rocky" or ansible_distribution == "CentOS"
+  become: true
+  ansible.builtin.copy:
+    src: wheel-group-no-sudo-password
+    dest: /etc/sudoers.d/30-wheel
+    owner: root
+    group: "{{ ansible_user }}"
+    mode: 0644
+
+- name: Configure SSH server
+  ansible.builtin.import_tasks: sshd.yml