Run apt upgrade after apt update
Currently we execute the apt-upgrade.yml playbook first thing (before even the "apt update" stage), which makes sense from a system stability perspective (and it being a separate playbook allows us to use a staggered rollout strategy just for this step), but it makes it impossible to run a distro upgrade just with "float" itself.
Consider doing things the other way around.