wip: ansible pull

Also use this role instead of plain ansible.builtin.reboot.
This is in preparation for using ansible_pull as we don't want to have
ansible.builtin.reboot fail local playbook runs.

playbooks/connection_test.yaml

@@ -1,7 +0,0 @@
----
-- name: connection test
-  hosts: all
-  tasks:
-    - name: debug
-      ansible.builtin.debug:
-        var: ansible_connection

playbooks/reboot_test.yaml

@@ -1,15 +0,0 @@
----
-- name: reboot test
-  hosts: all
-  tasks:
-    - name: debug before
-      ansible.builtin.debug:
-        msg: before
-
-    - name: reboot
-      ansible.builtin.include_role:
-        name: reboot
-
-    - name: debug after
-      ansible.builtin.debug:
-        msg: after

roles/apt_update_and_upgrade/handlers/main.yaml

@@ -1,3 +1,6 @@
 - name: reboot the system
-  become: true
-  ansible.builtin.reboot:
+  ansible.builtin.include_role:
+    role: reboot
+  vars:
+    # Simply don't reboot on local connections and rely on proper handling of /var/run/reboot-required.
+    reboot__local_handling: ignore