This completes the Gitea webhook requirement for ansible IaC (#442). The webhook (ID 34) was registered via API to fire on PR merge and trigger
ansible-pull to converge the fleet. Added webhook_deploy role that
provisions a systemd oneshot service to handle the webhook endpoint.
Made deploy_on_webhook.sh executable.
Closes#442