refactor(vars): add system/hypervisor dict inputs

- Normalize new system_cfg + hypervisor_cfg and keep legacy vm_* and hypervisor_* aliases

- Support multiple system.disks (creation + optional mount + fstab generation)

- Add system_check safety role (production + existing system detection)

- Update README and example inventories

roles/configuration/tasks/encryption/tpm2.yml

@@ -36,7 +36,7 @@
             + [configuration_luks_device]
           }}
         configuration_luks_enroll_chroot_cmd: >-
-          {{ chroot_command }} /mnt {{ configuration_luks_enroll_args | join(' ') }}
+          {{ chroot_command }} {{ configuration_luks_enroll_args | join(' ') }}
       ansible.builtin.command: "{{ configuration_luks_enroll_chroot_cmd }}"
       register: configuration_luks_tpm2_enroll_chroot
       changed_when: configuration_luks_tpm2_enroll_chroot.rc == 0