Refactor portainer.yml: update ansible_password comments for clarity and add optional SSH and sudo passwords; add sanity check playbook for SSH and sudo verification.

host_vars/portainer.yml

@@ -1,5 +1,5 @@
 ansible_user: howard
-ansible_password: "Papadopolus0"     # TIP: Put this in Ansible Vault.
+ansible_password: "Papadopolus0"         # English: SSH password for howard@portainer
 ansible_connection: ssh
 ansible_port: 22
 ansible_ssh_common_args: >-
@@ -7,8 +7,13 @@ ansible_ssh_common_args: >-
   -o UserKnownHostsFile=/dev/null
   -J root@192.168.69.2
 
-# If howard is NOT in the 'docker' group, we need sudo:
+# English: We escalate to root via sudo.
 ansible_become: true
 ansible_become_method: sudo
-# If sudo asks for a password, also set:
-# ansible_become_password: "*******"   # ideally via Vault
+
+# English: SUDO password for howard (often same as SSH password; change if different).
+ansible_become_password: "Papadopolus0"
+
+# (Optional, for older installs—harmless to keep both)
+ansible_ssh_pass: "Papadopolus0"
+ansible_sudo_pass: "Papadopolus0"