Share the Molecule scaffolding and add just molecule

Three things that would not have scaled to 70 roles:

- The Python and Ansible dependency pins were about to be copied into every
  role. They now live once in molecule-shared/, which scenarios reference
  relatively, so they cannot drift apart.
- The helper container images used for probing were hardcoded inline. They
  are pinned once in molecule-shared/vars.yml, carry `# renovate:`
  annotations, and a custom manager in .github/renovate.json keeps them
  current - verified with a local Renovate dry run, which offers
  curl 8.11.1 -> 8.21.0 and python 3.13 -> 3.14-alpine. Seventy invisible
  hardcodes is the blindness class we have been removing elsewhere.
- Running a scenario meant knowing the venv and cd incantation. `just
  molecule <role>` does it, and with no argument lists the roles that have
  a scenario.

Molecule is deliberately not wired into prek: a run takes minutes, pulls
images and needs Docker, which is fine on request and not fine per commit.

docs/molecule-testing.md covers how to run and write these, including the
four things a role here needs that a standalone role does not. AGENTS.md
points at it rather than carrying the detail.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

roles/custom/matrix-alertmanager-receiver/molecule/default/molecule.yml

@@ -6,7 +6,7 @@
 dependency:
   name: galaxy
   options:
-    requirements-file: requirements.yml
+    requirements-file: ../../../../../molecule-shared/requirements.yml
     force: true
 driver:
   name: docker

roles/custom/matrix-alertmanager-receiver/molecule/default/prepare.yml

@@ -6,6 +6,8 @@
 - name: Prepare matrix-alertmanager-receiver Molecule tests
   hosts: all
   become: true
+  vars_files:
+    - "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') }}/../../../molecule-shared/vars.yml"
   gather_facts: true
   tasks:
     - name: Ensure apt cache is updated
@@ -116,7 +118,7 @@
           - --network={{ matrix_alertmanager_receiver_container_network }}
           - --network-alias=matrix.molecule.local
           - --volume=/root/matrix-homeserver-stub.py:/stub.py:ro
-          - docker.io/library/python:3.13-alpine
+          - "{{ molecule_shared_image_python }}"
           - python3
           - /stub.py
       register: matrix_alertmanager_receiver_molecule_stub

roles/custom/matrix-alertmanager-receiver/molecule/default/requirements.yml

@@ -1,20 +0,0 @@
----
-roles:
-  - name: ansible-role-docker
-    src: https://github.com/geerlingguy/ansible-role-docker
-    scm: git
-    version: 8.0.0
-
-  - name: com.devture.ansible.role.playbook_help
-    src: https://github.com/devture/com.devture.ansible.role.playbook_help
-    scm: git
-    version: main
-
-  - name: com.devture.ansible.role.systemd_docker_base
-    src: https://github.com/devture/com.devture.ansible.role.systemd_docker_base
-    scm: git
-    version: v1.5.0-0
-
-collections:
-  - name: community.docker
-    version: 5.2.2

roles/custom/matrix-alertmanager-receiver/molecule/default/requirements.yml.license

@@ -1,3 +0,0 @@
-SPDX-FileCopyrightText: 2026 Slavi Pantaleev
-
-SPDX-License-Identifier: AGPL-3.0-or-later

roles/custom/matrix-alertmanager-receiver/molecule/default/verify.yml

@@ -6,6 +6,8 @@
 - name: Verify matrix-alertmanager-receiver
   hosts: all
   become: true
+  vars_files:
+    - "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') }}/../../../molecule-shared/vars.yml"
   gather_facts: false
 
   tasks:
@@ -54,7 +56,7 @@
           - run
           - --rm
           - --network={{ matrix_alertmanager_receiver_container_network }}
-          - docker.io/curlimages/curl:8.11.1
+          - "{{ molecule_shared_image_curl }}"
           - --silent
           - --show-error
           - --write-out
@@ -100,7 +102,7 @@
           - run
           - --rm
           - --network={{ matrix_alertmanager_receiver_container_network }}
-          - docker.io/curlimages/curl:8.11.1
+          - "{{ molecule_shared_image_curl }}"
           - --silent
           - --output
           - /dev/null

roles/custom/matrix-alertmanager-receiver/molecule/requirements.txt

@@ -1,4 +0,0 @@
-ansible==14.1.0
-molecule==26.6.0
-molecule-plugins==26.7.8
-docker==7.2.0

roles/custom/matrix-alertmanager-receiver/molecule/requirements.txt.license

@@ -1,3 +0,0 @@
-SPDX-FileCopyrightText: 2026 Slavi Pantaleev
-
-SPDX-License-Identifier: AGPL-3.0-or-later