feat: bootstrap and harden Railiance01 at HostEurope

- Extend base role with fail2ban, UFW k3s/Flannel rules, HISTCONTROL
- Add handlers dir for fail2ban restart
- Fix inventory script to emit correct dynamic inventory JSON format
- Add roles_path to ansible.cfg so playbook finds roles
- Add Railiance01 (92.205.62.239) to inventory/servers.yaml
- Mark workplan T03/T04/T05 as done

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

ansible/ansible.cfg

@@ -1,5 +1,6 @@
 [defaults]
 inventory = ./inventory_from_yaml.py
+roles_path = ./roles
 host_key_checking = False
 retry_files_enabled = False
 interpreter_python = auto