Tidy ansible

[JimMadge]

✅ Checklist

• You have given your pull request a meaningful title (e.g. Enable foobar integration rather than 515 foobar).
• You are targeting the appropriate branch. If you're not certain which one this is, it should be develop.
• Your branch is up-to-date with the target branch (it probably was when you started, but it may have changed since then).

🚦 Depends on

#2092
#2115

⤴️ Summary

🌂 Related issues

Closes #2096

🔬 Tests

Tested on a fresh deployment. All Ansible tasks run correctly.

[github-actions]

Coverage report

Click to see where and how coverage changed

File	Statements	Missing	Coverage	Coverage (new stmts)	Lines missing
data_safe_haven/infrastructure/programs
declarative_sre.py
Project Total

This report was generated by python-coverage-comment-action

[JimMadge]

Some issues with workspaces deploying and getting to the desired state service before the ansible vars file blob has been created.

Trying to fix that by adding a depends_on.

[JimMadge]

Still seems to be a delay between the pulumi resource being created and the file being available over NFS.
Adding a line to cloud init to wait for the vars file fixed this.

[craddm]

LGTM