Ansible playbook suitable for pull-mode

[finchd]

Need a playbook that

1. installs pinned package versions,
2. maintains root and service account configs
   and a cronjob to pull it and run it.