Remove ansible role meta dependencies to fix duplicate execution (#20)

## Summary
- Remove all `meta/main.yml` dependencies from ansible roles
- Role ordering is now controlled entirely by `indri.yml` playbook
- Fix incorrect roles path in CLAUDE.md (`playbooks/roles` → `roles`)

## Why
Ansible's tag accumulation behavior prevents proper role deduplication when using meta dependencies. When a role is pulled in as a dependency, the parent role's tags are added to the dependency's tags (e.g., `[loki]` becomes `[alloy, loki]`), making them appear as different invocations to Ansible and causing roles to run multiple times.

## Deployment and Testing
- [x] Verified with `ansible-playbook --list-tasks` that each role now appears exactly once
- [x] Run full provision to verify no regressions

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Reviewed-on: https://forge.tail8d86e.ts.net/eblume/blumeops/pulls/20

CLAUDE.md

@@ -44,7 +44,7 @@ Some important places you can look:
 ```
 ./mise-tasks/  # management and utility scripts run via `mise run`
 ./ansible/playbooks/indri.yml  # primary blumeops provisioning script
-./ansible/playbooks/roles/  # role dirs here give good overview of services; dependencies tracked via meta/main.yml
+./ansible/roles/  # role dirs here give good overview of services
 ./pulumi/  # python (via uv) pulumi script for provisioning the tailnet and other cloud resources
 ~/code/personal/  # projects managed by the user
 ~/code/3rd/  # external projects, mirrored or downloaded