ipa/client: Combine operations on the IPA server
    
    The reason for this is to avoid having to do the same or similar things
    over and over again for each host in the play, especially since these
    operations are delegated to the IPA server, i.e. had to run sequentially
    host after host in order to avoid race conditions.
    
    To achieve this, the IPA client related group variables are prepared in
    suitable structures in `prepare-ipa-info.yml` and consumed by
    `common.yml`, `hbac.yml` and `sudo.yml`, which do most operations in one
    go per e.g. host group on the affected IPA server(s).
    
    Additionally:
    - Remove compat for legacy `fas_client_groups`, only check for its
      presence and warn.
    - Remove the prepared but masked out task to manage password-less sudo
      access.
    - Make yamllint a little happier on the changed files.
    
    Signed-off-by: Nils Philippsen <nils@redhat.com>