Adds ansible-role-cleanup from the MASH project. It can remove superseded
Docker images and stopped containers on every playbook run (unlike
`docker image prune -a`, keeping the images of stopped services), vacuum
old logs, remove paths and, on Debian-based distributions, upgrade
packages and purge old kernels. Everything is off by default.
The role runs after systemd_service_manager, once every service is
running, so the Docker cleanup can tell which images are still needed.
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
