ansible: document role variables and ship example playbook

README walks through what the role does, every default, and how to
invoke it from a parent playbook. examples/playbook.yml is a runnable
copy that targets a `workstations` group with a sudo=required+fido2
stack and one pending user.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

ansible-role/examples/playbook.yml

@@ -0,0 +1,31 @@
+---
+# Example playbook that applies the dangerousthings.authforge role to a
+# fleet of headless Ubuntu workstations.
+#
+# Run from the parent of this `ansible-role/` directory with:
+#
+#   ansible-playbook -i inventory ansible-role/examples/playbook.yml
+#
+# (You'll need the role linked into your roles_path, or to install it from
+# Galaxy as `dangerousthings.authforge`.)
+
+- name: Roll out AuthForge to engineering workstations
+  hosts: workstations
+  become: true
+  roles:
+    - role: dangerousthings.authforge
+      vars:
+        authforge_install_gui: false
+        authforge_stacks:
+          sudo:
+            mode: required
+            methods:
+              - fido2
+        authforge_storage_backend: per-user
+        authforge_firstrun_methods:
+          - fido2
+        authforge_firstrun_deadline_hours: 72
+        authforge_pending_users:
+          - user: alice
+            methods:
+              - fido2