- set ansible_user to 'mrwho' and disable SSH password authentication
- upgrade k8s_version to 1.36 in all.yml (removed from control_plane.yml)
- reduce traefik ingress routes to only k8s-dashboard and longhorn-ui with HTTPS
- update host IP addresses to 172.20.21.x subnet
- configure longhorn disk for k8s-worker-01