Put some variable in ./vars/main.yaml scope to avoid change in one
role import overwriting all successive use.

Allows custom (non-ed25519) algorithm and verification of broken trust
chain, to work with current stable ca_manager implementation.

New role to automate generation and issuing of certificate using a
`ca_manager` server.

Code is more sintentic and concise, and we avoid duplications.