feat(ansible): playbooks self-describe via "# description:" comment

Playbooks can ship a human description Steward reads and shows when one is
selected. Convention: a `# description: <text>` magic comment (Ansible rejects
unknown play keys, so a comment is the portable place — works for third-party
playbooks too); falls back to the first play's name:. sources
.discover_playbook_description().

Surfaced at the top of the shared _playbook_vars.html partial, which loads on
playbook selection in the host run form, schedules form, and browse run form.
All four bundled playbooks (provision/install/update/docker_prune) now carry a
description line. Unit tests added.

Scribe #900.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

steward/ansible/bundled/host_agent/install.yml

@@ -1,4 +1,5 @@
 ---
+# description: Install or re-enroll the Steward host agent on an already-provisioned host.
 # Install (or update) the Steward host agent on a target. Mirrors the
 # curl-based install.sh. Pass the per-host registration token as extra-vars:
 #   steward_url=https://steward.example  steward_token=<token from Host Agents>

steward/ansible/bundled/host_agent/provision.yml

@@ -1,4 +1,5 @@
 ---
+# description: Provision a fresh host — create the steward account + managed key + passwordless sudo, then install the agent.
 # First-contact provisioning: bring a fresh host under Steward management, then
 # install the host agent — all in one idempotent run.
 #

steward/ansible/bundled/host_agent/update.yml

@@ -1,4 +1,5 @@
 ---
+# description: Update the Steward host agent (refresh agent.py + restart) on hosts already running it.
 # Update an already-installed Steward host agent: refresh agent.py and restart.
 #
 # Deliberately does NOT touch the registration token or /etc/steward-agent.conf

steward/ansible/bundled/maintenance/docker_prune.yml

@@ -1,4 +1,5 @@
 ---
+# description: Reclaim disk on Docker / Swarm nodes by pruning unused images, containers, networks and build cache.
 # Reclaim disk on Docker / Docker Swarm nodes by removing unused data.
 # Safe by default: prunes dangling images, stopped containers, unused networks
 # and build cache. Set extra-vars to widen scope: