fix(roles): follow the python scripts to their new folder

Twelve callers load their scripts with the relative form
lookup('file', 'name.py'), which resolves against the role's files/
directory. dfe7a7fdd moved those scripts into files/python/ without
updating them, so the MCP provisioning and probes of baserow, checkmk,
flowise, gitlab, homeassistant, jellyfin, n8n, openwebui and pretix, plus
n8n's AI gateway task, all resolved a path that no longer exists.

This is the second time the same relocation left callers behind. After
2aec4326a fixed the php paths, the claim that no stale references remained
came from grepping the worktree, which already carried the corrected paths;
HEAD still held the old ones. The check has to run against the commit.

Verified against HEAD this time: the eleven remaining stale relative lookups
are exactly the files in this bundle, and no other loading form (copy src,
script) carries a stale path.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

roles/web-app-baserow/tasks/utils/mcp.yml

@@ -31,7 +31,7 @@
       - "{{ BASEROW_MANAGE_PY }}"
       - shell
       - -c
-      - "{{ lookup('file', 'provision_mcp.py') }}"
+      - "{{ lookup('file', 'python/provision_mcp.py') }}"
   register: baserow_mcp_provision
   retries: 30
   delay: 10
@@ -56,7 +56,7 @@
       - "{{ BASEROW_LOCAL_CID }}" # nocheck: container-exec-resolver
       - "{{ BASEROW_PYTHON }}"
       - "-"
-    stdin: "{{ lookup('file', 'probe_mcp_endpoint.py') }}"
+    stdin: "{{ lookup('file', 'python/probe_mcp_endpoint.py') }}"
   register: baserow_mcp_probe
   retries: 30
   delay: 10

roles/web-app-checkmk/tasks/utils/mcp.yml

@@ -33,7 +33,7 @@
       - "{{ CHECKMK_IDENTITY_LOCAL_CID }}" # nocheck: container-exec-resolver
       - python3
       - "-"
-    stdin: "{{ lookup('file', 'provision_mcp_identity.py') }}"
+    stdin: "{{ lookup('file', 'python/provision_mcp_identity.py') }}"
   register: checkmk_mcp_identity
   retries: 30
   delay: 10

roles/web-app-flowise/tasks/utils/mcp.yml

@@ -21,7 +21,7 @@
       - "{{ FLOWISE_LOCAL_CID }}" # nocheck: container-exec-resolver
       - node
       - "-"
-    stdin: "{{ lookup('file', 'reconcile/identity_password.js') }}"
+    stdin: "{{ lookup('file', 'javascript/reconcile/identity_password.js') }}"
   register: flowise_mcp_password
   retries: 30
   delay: 10
@@ -50,7 +50,7 @@
       - "{{ FLOWISE_LOCAL_CID }}" # nocheck: container-exec-resolver
       - python3
       - "-"
-    stdin: "{{ lookup('file', 'mint_mcp_api_key.py') }}"
+    stdin: "{{ lookup('file', 'python/mint_mcp_api_key.py') }}"
   register: flowise_mcp_identity
   retries: 30
   delay: 10
@@ -79,7 +79,7 @@
       - "{{ FLOWISE_LOCAL_CID }}" # nocheck: container-exec-resolver
       - python3
       - "-"
-    stdin: "{{ lookup('file', 'reconcile/mcp_servers.py') }}"
+    stdin: "{{ lookup('file', 'python/reconcile/mcp_servers.py') }}"
   register: flowise_mcp_registry
   retries: 30
   delay: 10

roles/web-app-gitlab/tasks/utils/mcp/probe.yml

@@ -18,7 +18,7 @@
       - "{{ GITLAB_MCP_LOCAL_CID }}" # nocheck: container-exec-resolver
       - ruby
       - "-"
-    stdin: "{{ lookup('file', 'probe_mcp_token.rb') }}"
+    stdin: "{{ lookup('file', 'ruby/probe_mcp_token.rb') }}"
   register: gitlab_mcp_probe
   retries: 30
   delay: 10

roles/web-app-gitlab/tasks/utils/mcp/provision.yml

@@ -21,7 +21,7 @@
       - "{{ GITLAB_RAILS_BIN }}"
       - runner
       - "-"
-    stdin: "{{ lookup('file', 'provision_mcp_token.rb') }}"
+    stdin: "{{ lookup('file', 'ruby/provision_mcp_token.rb') }}"
   register: gitlab_mcp_mint
   retries: 30
   delay: 10

roles/web-app-homeassistant/tasks/utils/mcp/probe.yml

@@ -12,7 +12,7 @@
       - "{{ HOMEASSISTANT_LOCAL_CID }}" # nocheck: container-exec-resolver
       - python3
       - "-"
-    stdin: "{{ lookup('file', 'probe_mcp_token.py') }}"
+    stdin: "{{ lookup('file', 'python/probe_mcp_token.py') }}"
   register: homeassistant_token_probe
   retries: 30
   delay: 10

roles/web-app-homeassistant/tasks/utils/mcp/provision.yml

@@ -24,7 +24,7 @@
       - "{{ HOMEASSISTANT_LOCAL_CID }}" # nocheck: container-exec-resolver
       - python3
       - "-"
-    stdin: "{{ lookup('file', 'provision_mcp.py') }}"
+    stdin: "{{ lookup('file', 'python/provision_mcp.py') }}"
   register: homeassistant_provision
   retries: 30
   delay: 10

roles/web-app-jellyfin/tasks/utils/mcp.yml

@@ -40,7 +40,7 @@
       - "{{ JELLYFIN_IDENTITY_LOCAL_CID }}" # nocheck: container-exec-resolver
       - python3
       - "-"
-    stdin: "{{ lookup('file', 'provision_mcp_identity.py') }}"
+    stdin: "{{ lookup('file', 'python/provision_mcp_identity.py') }}"
   register: jellyfin_mcp_identity
   retries: 30
   delay: 10

roles/web-app-n8n/tasks/utils/ai_gateway.yml

@@ -7,7 +7,7 @@
     argv:
       - python3
       - "-"
-    stdin: "{{ lookup('file', 'provision/ai.py') }}"
+    stdin: "{{ lookup('file', 'python/provision/ai.py') }}"
   environment:
     N8N_BASE: "{{ N8N_INTERNAL_API_URL }}"
     N8N_OWNER_EMAIL: "{{ N8N_OWNER_EMAIL }}"

roles/web-app-n8n/tasks/utils/mcp.yml

@@ -4,7 +4,7 @@
     argv:
       - python3
       - "-"
-    stdin: "{{ lookup('file', 'provision/mcp.py') }}"
+    stdin: "{{ lookup('file', 'python/provision/mcp.py') }}"
   environment:
     N8N_BASE: "{{ N8N_INTERNAL_API_URL }}"
     N8N_OWNER_EMAIL: "{{ N8N_OWNER_EMAIL }}"

roles/web-app-openwebui/tasks/utils/mcp_grants.yml

@@ -22,7 +22,7 @@
       - "{{ OPENWEBUI_LOCAL_CID }}" # nocheck: container-exec-resolver
       - python3
       - "-"
-    stdin: "{{ lookup('file', 'provision_mcp_grants.py') }}"
+    stdin: "{{ lookup('file', 'python/provision_mcp_grants.py') }}"
   register: openwebui_mcp_grants
   retries: 30
   delay: 10

roles/web-app-pretix/tasks/utils/mcp.yml

@@ -26,7 +26,7 @@
       - pretix
       - shell_scoped
       - --override
-    stdin: "{{ lookup('file', 'provision_mcp_identity.py') }}"
+    stdin: "{{ lookup('file', 'python/provision_mcp_identity.py') }}"
   register: pretix_mcp_identity
   retries: 30
   delay: 10