Mejorar idempotencia: usar copy para PEM, agregar changed_when a GPG export

roles/kojid/tasks/main.yaml

@@ -67,9 +67,10 @@
     - {src: "kojid.key", dest: "{{ kojid_key_path }}", mode: "0600"}
 
 - name: "Concatenate certificate and key into a PEM file"
-  ansible.builtin.shell:
-    cmd: "cat {{ kojid_crt_path }} {{ kojid_key_path }} > {{ kojid_pem_path }}"
-    creates: "{{ kojid_pem_path }}"
+  ansible.builtin.copy:
+    content: "{{ lookup('file', kojid_crt_path) }}\n{{ lookup('file', kojid_key_path) }}"
+    dest: "{{ kojid_pem_path }}"
+    mode: "0600"
 
 - name: Set ownership and permissions on kojid.pem
   ansible.builtin.file: