Streamline credential generation with single-level Ansible loops

This makes the credentials role significantly faster, Ansible is
not good at optimizing loops that go across an include_tasks
directive.

We pre-generate some simple lists in float.py for service credentials
that are enabled on each host, to simplify the iteration when
generating certificates.