Add ansible-lint and fix all warnings and errors

Adding # noqa no-changed-when, as the whole block will only be executed under a condition already selecting out the runs where those commands really have to be ran.

The mode on temporary ssh-key-file is just a guess, so please leave a comment if this mode is unsuitable for that purpose.