The role gathers the facts it uses. For example, if the user uses
ANSIBLE_GATHERING=explicit, the role uses the setup module with the
facts and subsets it requires.

This change allows us to test this. Before every role invocation, the test
will use meta: clear_facts so that the role starts with no facts.

Create a task file tests/tasks/run_role_with_clear_facts.yml to do the tasks
to clear the facts and run the role. Note that this means we don't need to
use gather_facts for the tests.

Some vars defined using ansible_facts have been changed to be defined with
set_fact instead. This is because of the fact that vars are lazily
evaluated - the var might be referenced when the facts have been cleared, and
will issue an error like ansible_facts["distribution"] is undefined. This is
typically done for blocks that have a when condition that uses ansible_facts
and the block has a role invocation using run_role_with_clear_facts.yml
These have been rewritten to define the when condition using set_fact. This
is because the when condition is evaluated every time a task is invoked in the
block, and if the facts are cleared, this will raise an undefined variable error.

This also updates the CI for the Ansible partner certification checking

Summary by Sourcery

Update CI workflows to run ansible-lint and ansible-test via tox across multiple Ansible/Python versions and adjust tests to clear facts before invoking the trustee_server role.

Enhancements:

• Introduce a reusable task file to clear facts and run the trustee_server role with optional failure handling.
• Update generated distro vars metadata to point to the current template source path.

CI:

• Run ansible-lint via tox with a version matrix for ansible-lint, ansible-core, and Python instead of the dedicated GitHub Action.
• Run ansible-test sanity checks via tox across a matrix of supported Ansible and Python versions instead of the ansible-test GitHub Action.
• Upgrade tox-lsr to version 3.18.1 in all affected GitHub workflows.

Tests:

• Change test playbooks to include the trustee_server role through the new clear-facts task wrapper so tests verify the role gathers its own required facts.
• Adjust a variable-override test playbook to rely on explicit role execution behavior rather than global fact gathering.

Chores:

• Regenerate or adjust auxiliary project metadata files such as ansible-lint config and FMF plan definitions.