Fixes #353 - Add health check command

Add a new foremanctl health command that verifies the state of all
Foreman services after installation or during troubleshooting.

Checks performed:
- Core services running (foreman, httpd, redis, postgresql)
- Dynflow workers running (orchestrator, worker, worker-hosts-queue)
- Pulp services running (pulp-api, pulp-content)
- Candlepin service running
- Foreman API responding (GET /api/v2/ping)
- Foreman tasks status (via Katello ping response)

Reports a summary of all failures and exits non-zero if any check
fails, making it suitable for scripting and CI use.

Author: jakduch

src/playbooks/health/health.yaml

@@ -0,0 +1,20 @@
+---
+- name: Run Foreman health checks
+  hosts: quadlet
+  become: true
+  gather_facts: true
+  vars_files:
+    - "../../vars/defaults.yml"
+    - "../../vars/base.yaml"
+  tasks:
+    - name: Execute health checks
+      ansible.builtin.include_tasks: ../../roles/checks/tasks/execute_check.yml
+      loop:
+        - check_services
+        - check_foreman_api
+
+    - name: Report status of health checks
+      ansible.builtin.fail:
+        msg: "{{ checks_results }}"
+      when:
+        - checks_results|default([])|length > 0

src/playbooks/health/metadata.obsah.yaml

@@ -0,0 +1,3 @@
+---
+help: |
+  Run health checks on Foreman services

src/roles/check_foreman_api/tasks/main.yaml

@@ -0,0 +1,18 @@
+---
+- name: Check Foreman API responds
+  ansible.builtin.uri:
+    url: "{{ foreman_url }}/api/v2/ping"
+    validate_certs: false
+    status_code: 200
+    timeout: 10
+  register: foreman_ping
+
+- name: Check Foreman tasks status
+  ansible.builtin.assert:
+    that:
+      - foreman_ping.json.results.katello.services.foreman_tasks.status == 'ok'
+    fail_msg: "Foreman tasks status: {{ foreman_ping.json.results.katello.services.foreman_tasks.status | default('unknown') }}"
+    success_msg: "Foreman tasks status: ok"
+  when:
+    - enabled_features | select('contains', 'content/') | list | length > 0
+    - foreman_ping.json.results.katello is defined

src/roles/check_services/tasks/main.yaml

@@ -0,0 +1,49 @@
+---
+- name: Gather service facts
+  ansible.builtin.service_facts:
+
+- name: Check core services are running
+  ansible.builtin.assert:
+    that:
+      - "ansible_facts.services[item + '.service'] is defined"
+      - "ansible_facts.services[item + '.service']['state'] == 'running'"
+    fail_msg: "Service {{ item }} is not running"
+    success_msg: "Service {{ item }} is running"
+  loop:
+    - foreman
+    - httpd
+    - redis
+    - postgresql
+
+- name: Check dynflow services are running
+  ansible.builtin.assert:
+    that:
+      - "ansible_facts.services[item + '.service'] is defined"
+      - "ansible_facts.services[item + '.service']['state'] == 'running'"
+    fail_msg: "Service {{ item }} is not running"
+    success_msg: "Service {{ item }} is running"
+  loop:
+    - dynflow-sidekiq@orchestrator
+    - dynflow-sidekiq@worker
+    - dynflow-sidekiq@worker-hosts-queue
+
+- name: Check Pulp services are running
+  ansible.builtin.assert:
+    that:
+      - "ansible_facts.services[item + '.service'] is defined"
+      - "ansible_facts.services[item + '.service']['state'] == 'running'"
+    fail_msg: "Service {{ item }} is not running"
+    success_msg: "Service {{ item }} is running"
+  loop:
+    - pulp-api
+    - pulp-content
+  when: enabled_features | select('contains', 'content/') | list | length > 0
+
+- name: Check Candlepin service is running
+  ansible.builtin.assert:
+    that:
+      - "ansible_facts.services['candlepin.service'] is defined"
+      - "ansible_facts.services['candlepin.service']['state'] == 'running'"
+    fail_msg: "Service candlepin is not running"
+    success_msg: "Service candlepin is running"
+  when: enabled_features | select('contains', 'content/') | list | length > 0