feat: probe http on every URL in addition to https (per KB 6972355)

[ericcames]

Summary

Closes #10.

Add http to every entry's schemes list in playbooks/files/websites.yml, taking probe coverage from 16 URLs to 32 URL/scheme combinations. Required by Red Hat KB 6972355 to validate the Azure firewall correctly.

What I learned re-reading the KB

When I opened #10 I assumed the KB called for http on a subset of URLs (OCSP, CRL). It does not. The KB says:

"We will list ports 80 and 443 even though many use https only. The reason for this is that port 80 is often provided as a convenience to redirect to port 443. We cannot guarantee that one of these dependent services may need to route traffic on port 80, so we suggest you open the firewall rule for both."

The only HTTPS-only call-out is *.blob.core.windows.net, which is not in this list. So the right move is http on every entry, not a curated subset — which is what this PR does.

I also chose one informative top-of-file comment over 16 uninformative per-entry comments (the original acceptance criterion). Each per-entry comment would have to say the same thing — "for redirect / dependent service support per KB" — which is exactly what the top-of-file comment now says once.

Why this stays revertible on its own

This is the only change in #8–#12 that alters which URLs we probe. If the weekly cron turns red on a Monday, the firewall-rule punch list output (added by #12) will name the exact host:port combinations to look at, and this PR can be reverted on its own without touching any of the surrounding work.

Test results

Locally on a Fedora laptop with open egress:

TASK [Show summary] ************************************************************
ok: [...] => {
    "msg": "32 of 32 URL probes passed."
}

Every http probe successfully followed follow_redirects: all to the host's https endpoint and matched the expected status.

Files

• playbooks/files/websites.yml — every entry gets [http, https] and the file header gains a KB-rationale comment block.
• CHANGELOG.md — entry under [Unreleased] / Added.

Test plan

• yamllint clean locally
• ansible-lint clean locally
• All 32 probes pass locally
• CI green on PR
• Weekly cron stays green on next scheduled run

🤖 Generated with Claude Code