refactor(configuration): extract shared BLS update task to reduce duplication

roles/configuration/tasks/encryption.yml

@@ -253,25 +253,11 @@
         mode: "0644"
         content: "{{ configuration_kernel_cmdline_new }}\n"
 
-    - name: Find BLS entries for encryption kernel cmdline
+    - name: Update BLS entries with LUKS kernel cmdline
       when: os_family == 'RedHat'
-      ansible.builtin.find:
-        paths: /mnt/boot/loader/entries
-        patterns: "*.conf"
-      register: configuration_kernel_bls_entries
-      changed_when: false
-
-    - name: Update BLS options with LUKS args
-      when:
-        - os_family == 'RedHat'
-        - configuration_kernel_bls_entries.files | length > 0
-      ansible.builtin.lineinfile:
-        path: "{{ item.path }}"
-        regexp: "^options "
-        line: "options {{ configuration_kernel_cmdline_new }}"
-      loop: "{{ configuration_kernel_bls_entries.files }}"
-      loop_control:
-        label: "{{ item.path }}"
+      vars:
+        _bls_cmdline: "{{ configuration_kernel_cmdline_new }}"
+      ansible.builtin.include_tasks: _bls_update.yml
 
     - name: Read grub defaults
       when: not os_family == 'RedHat'