Add third-party preparation task hook

roles/global_defaults/defaults/main.yml

@@ -8,6 +8,7 @@ firewalld_enabled: true
 zstd_enabled: true
 swap_enabled: true
 chroot_command: "arch-chroot"
+thirdparty_preparation_tasks_path: "dropins/preparation.yml"
 
 cis_enabled: "{{ cis | bool }}"