feat: Integración de Siguldry PKCS#11 y spooler de firmas

* Implementación del rol de Ansible 'siguldry' para CentOS Stream 10
* Migración del plugin de firmas de Koji Hub a un spooler asíncrono
* Modificación de roles para utilizar empaquetamiento RPM nativo de siguldry-pkcs11
* Documentación de decisiones (ADRs) y roadmap en docs/technical/
* Limpieza de binarios locales pesados de PKCS#11 en Ansible

Co-developed-by: Gemini AI <renich+gemini@woralelandia.com>
Signed-off-by: Rénich Bon Ćirić <renich@woralelandia.com>

roles/common/tasks/main.yaml

@@ -147,3 +147,60 @@
         key: "{{ item.stdout }}"
         state: present
       loop: "{{ scanned_keys.results }}"
+
+- name: Add all Koji node hosts to /etc/hosts
+  ansible.builtin.lineinfile:
+    path: /etc/hosts
+    line: "{{ hostvars[item].ansible_default_ipv4.address }} {{ item }}"
+    regexp: ".*{{ item }}"
+    state: present
+  loop: "{{ groups['all'] }}"
+  when:
+    - inventory_hostname != 'localhost'
+    - item != 'localhost'
+    - hostvars[item].ansible_default_ipv4.address is defined
+
+- name: Configure DNF speed and mirrors
+  ansible.builtin.blockinfile:
+    path: /etc/dnf/dnf.conf
+    marker: "# {mark} ANSIBLE MANAGED DNF CONFIG"
+    block: |
+      max_parallel_downloads = 10
+      minrate=1M
+      timeout=10
+  when: inventory_hostname != 'localhost'
+
+- name: Install EPEL release repository
+  ansible.builtin.dnf:
+    name: epel-release
+    state: present
+  when: inventory_hostname != 'localhost'
+
+- name: Install system utility tools
+  ansible.builtin.dnf:
+    name:
+      - bash-completion
+      - htop
+      - iftop
+      - iotop
+      - rsync
+      - tmux
+      - vim-enhanced
+    state: present
+  when: inventory_hostname != 'localhost'
+
+- name: Perform full package upgrade and distro-sync
+  ansible.builtin.dnf:
+    name: "*"
+    state: latest
+  register: dnf_upgrade_result
+  when: inventory_hostname != 'localhost'
+
+- name: Reboot if packages were upgraded
+  ansible.builtin.reboot:
+    reboot_timeout: 600
+  when:
+    - inventory_hostname != 'localhost'
+    - dnf_upgrade_result.changed
+
+