ci: extend ansible-role-facts-test trigger paths (closes #7223 partial) (#7242)

Audit per #7223 found ansible-role-facts-test.yml trigger paths are
narrower than what the workflow validates. Missing:

  ansible.cfg                              - validates callback config (#7137)
                                             this paragraph was added in #7137
                                             but lost in the squash-merge
  playbooks/pre-flight-code-sync.yml       - tested via test_clean_yml_loops
  playbooks/update-all-nodes.yml           - shares git_repo_root code path
  update-all-nodes.yml                     - top-level (basename collision)
  roles/_shared/tasks/**                   - shared clean.yml + apt-repo
                                             tasks (#7058 + #7218); the
                                             test_clean_yml_loops playbook
                                             includes these

After this fix, every file actually exercised by the workflow's run:
scripts is also in the trigger paths. Prevents silent green via "workflow
not triggered" instead of green via "tests pass" (the regression class
this issue identified).

Other workflow audits performed:
  autoresearch-image.yml        - paths only Dockerfile/requirements/main —
                                  any other Python module change wouldn't
                                  trigger rebuild. NOT FIXED here (separate
                                  scope, autoresearch service is rarely
                                  modified).
  frontend-codegen-drift.yml    - duplicate path entry (push+PR triggers
                                  share). Cosmetic, not fixed.
  frontend-test/visual-regression - duplicate paths same reason. Cosmetic.
  All others — paths look complete.

Co-authored-by: t <t@t>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: 3 people

.github/workflows/ansible-role-facts-test.yml

@@ -19,19 +19,29 @@ name: ansible-role-facts-test
 on:
   pull_request:
     paths:
+      - 'autobot-slm-backend/ansible/ansible.cfg'
       - 'autobot-slm-backend/ansible/inventory/group_vars/**'
       - 'autobot-slm-backend/ansible/playbooks/provision-fleet-roles.yml'
+      - 'autobot-slm-backend/ansible/playbooks/pre-flight-code-sync.yml'
+      - 'autobot-slm-backend/ansible/playbooks/update-all-nodes.yml'
+      - 'autobot-slm-backend/ansible/update-all-nodes.yml'
       - 'autobot-slm-backend/ansible/roles/*/tasks/clean.yml'
+      - 'autobot-slm-backend/ansible/roles/_shared/tasks/**'
       - 'autobot-slm-backend/ansible/tests/**'
       - '.github/workflows/ansible-role-facts-test.yml'
   push:
     branches:
       - Dev_new_gui
       - main
     paths:
+      - 'autobot-slm-backend/ansible/ansible.cfg'
       - 'autobot-slm-backend/ansible/inventory/group_vars/**'
       - 'autobot-slm-backend/ansible/playbooks/provision-fleet-roles.yml'
+      - 'autobot-slm-backend/ansible/playbooks/pre-flight-code-sync.yml'
+      - 'autobot-slm-backend/ansible/playbooks/update-all-nodes.yml'
+      - 'autobot-slm-backend/ansible/update-all-nodes.yml'
       - 'autobot-slm-backend/ansible/roles/*/tasks/clean.yml'
+      - 'autobot-slm-backend/ansible/roles/_shared/tasks/**'
       - 'autobot-slm-backend/ansible/tests/**'
 
 jobs: