---
# Targeted patch-management run without re-applying the other roles.
# Intended for scheduled execution (cron/AWX).
# Run: ansible-playbook playbooks/patch_only.yml

- name: Apply patch management configuration only
  hosts: linux_all
  become: true
  roles:
    - role: patch_mgmt