Streamline credential generation with single-level Ansible loops

This makes the credentials role significantly faster, Ansible is not good at optimizing loops that go across an include_tasks directive.

We pre-generate some simple lists in float.py for service credentials that are enabled on each host, to simplify the iteration when generating certificates.