fix(ansible): sanitize defaults and harden deployment

Make automation safe for the public ETSI repo while preserving local overrides through optional inventory and secrets files. Also fix verified deployment issues found during single-host and dual-host runs on remote Kind clusters.