Prepare Clock host identity before attended key delivery

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6

ansible/roles/railiance_clock/tasks/prepare.yaml

@@ -0,0 +1,21 @@
+---
+- name: Create unprivileged authority account
+  ansible.builtin.user:
+    name: railiance-clock
+    system: true
+    shell: /usr/sbin/nologin
+    create_home: false
+- name: Create root-owned install tree
+  ansible.builtin.file:
+    path: "{{ railiance_clock_install_root }}"
+    state: directory
+    owner: root
+    group: root
+    mode: '0755'
+- name: Create private signing-key directory
+  ansible.builtin.file:
+    path: "{{ railiance_clock_state_root }}"
+    state: directory
+    owner: railiance-clock
+    group: railiance-clock
+    mode: '0700'