Decouple Ansible group names from service names

The Ansible group name is normalized to a valid Python identifier ('_'
replaces '-', for now, as the only normalization). As a consequence we
can no longer use groups[service_name] syntax, but should switch to
either

    services[service_name].hosts

or

    groups[services[service_name].group_name]