Network IaC, Part 2: CI a Team Can Trust
Putting the Ansible model from part 1 under Gitea Actions, twice: once for one person, then again for a team. What a clean checkout found, where the secrets were leaking, and how to compute a full change plan without ever handing CI a device password.