chore: add yamllint and ansible-lint configs for local validation

Stage 2 of REFACTOR_PLAN.md. Repo had no CI or local validation tooling at
all. Tuned rules to match this repo's existing conventions (no trailing
newline on hand-written manifests, aligned comment blocks) rather than
rewriting hundreds of pre-existing files to satisfy defaults.

Baseline is clean: yamllint reports 0 issues repo-wide, kubeconform validates
117 manifests + 20 Argo CD Applications, and all Ansible playbooks pass
--syntax-check.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

.ansible-lint

@@ -0,0 +1,12 @@
+# Config for: ansible-lint
+# Applied by: ansible-lint (run from repo root)
+exclude_paths:
+  - .cache/
+  - manifests/
+  - argocd/
+  - values/
+
+use_default_rules: true
+
+skip_list:
+  - yaml[line-length]

.yamllint.yml

@@ -0,0 +1,25 @@
+# Config for: yamllint
+# Applied by: yamllint -c .yamllint.yml .
+extends: default
+
+rules:
+  line-length: disable
+  document-start: disable
+  new-line-at-end-of-file: disable
+  comments-indentation: disable
+  commas:
+    max-spaces-after: -1
+  octal-values:
+    forbid-implicit-octal: true
+    forbid-explicit-octal: true
+  truthy:
+    allowed-values: ["true", "false", "on"]
+  comments:
+    min-spaces-from-content: 1
+  braces:
+    max-spaces-inside: 1
+  brackets:
+    max-spaces-inside: 1
+
+ignore: |
+  router/