Add task tags for selective playbook execution and fix vault loading

ansible/site.yml

@@ -9,6 +9,7 @@
   become: true
   pre_tasks:
     - name: Load local vault variables when available
+      tags: [always]
       ansible.builtin.include_vars:
         file: "{{ playbook_dir }}/../secrets/vault.yml"
       when: lookup('ansible.builtin.fileglob', playbook_dir + '/../secrets/vault.yml', errors='ignore') != ''