feat(ansible): add conditional git cloning and fix vault variable names

- Add repo URLs and conditional clone tasks for Agent-S, pulseaudio-module-xrdp, and rommie repositories
- Create required directories (github_dir and repo_dir) before cloning
- Update fetch/pull commands to only execute when repositories are not freshly cloned
- Fix vault variable naming inconsistencies in host_vars files (rosalind.incus.yml, titania.incus.yml)

ansible/inventory/host_vars/rosalind.incus.yml

@@ -234,6 +234,6 @@ searxng_oauth2_oidc_issuer_url: "https://id.ouranos.helu.ca"
 searxng_oauth2_redirect_url: "https://searxng.ouranos.helu.ca/oauth2/callback"
 
 # OAuth2 Credentials (from vault)
-searxng_oauth2_client_id: "{{ vault_searxng_oauth2_client_id }}"
-searxng_oauth2_client_secret: "{{ vault_searxng_oauth2_client_secret }}"
-searxng_oauth2_cookie_secret: "{{ vault_searxng_oauth2_cookie_secret }}"
+searxng_oauth2_client_id: "{{ vault_searxng_oauth_client_id }}"
+searxng_oauth2_client_secret: "{{ vault_searxng_oauth_client_secret }}"
+searxng_oauth2_cookie_secret: "{{ vault_searxng_oauth_cookie_secret }}"

ansible/inventory/host_vars/titania.incus.yml

@@ -259,7 +259,7 @@ openwebui_oauth2_client_id: "{{ vault_openwebui_oauth_client_id }}"
 openwebui_oauth2_client_secret: "{{ vault_openwebui_oauth_client_secret }}"
 pgadmin_oauth_client_id: "{{ vault_pgadmin_oauth_client_id }}"
 pgadmin_oauth_client_secret: "{{ vault_pgadmin_oauth_client_secret }}"
-searxng_oauth2_client_id: "{{ vault_searxng_oauth2_client_id }}"
-searxng_oauth2_client_secret: "{{ vault_searxng_oauth2_client_secret }}"
+searxng_oauth2_client_id: "{{ vault_searxng_oauth_client_id }}"
+searxng_oauth2_client_secret: "{{ vault_searxng_oauth_client_secret }}"
 spelunker_oauth2_client_id: "{{ vault_spelunker_oauth_client_id }}"
 spelunker_oauth2_client_secret: "{{ vault_spelunker_oauth_client_secret }}"