packages are more generic

- if config is needed, it has a file in vars/
- all imported vars for pkgs are namespaced with _<pkgname>

tasks/pkgs/vault.yml

@@ -1,9 +1,13 @@
 # install hashicorp vault for RedHat
 ---
+- ansible.builtin.include_vars:
+    file: hashicorp_repo.yml
+    name: _hashicorp
+
 - name: ensure hashicorp repo is active
   ansible.builtin.include_tasks:
-    file: "{{ ansible_os_family }}/hashicorp_repo.yml"
+    file: "pkgs/hashicorp_repo.yml"
 
 - name: append to pkgs
   set_fact:
-    syspkgs: "{{ syspkgs + [ 'vault' ] }}"
+    syspkgs: "{{ syspkgs + [ _hashicorp.vault[ansible_system] ] }}"