syncriscv: add role for mirroring the RISC-V port

Going to be served by all our Geo boxes under riscv.mirror.pkgbuild.com.

roles/grafana/templates/grafana.ini.j2

@@ -608,6 +608,7 @@ role_attribute_strict = true
 ;expected_claims = {"aud": ["foo", "bar"]}
 ;key_file = /path/to/key/file
 ;auto_sign_up = false
+;url_login = false
 
 #################################### Auth LDAP ##########################
 [auth.ldap]
@@ -1055,6 +1056,8 @@ mode = syslog
 ;server_url =
 # If the remote HTTP image renderer service runs on a different server than the Grafana server you may have to configure this to a URL where Grafana is reachable, e.g. http://grafana.domain/.
 ;callback_url =
+# An auth token that will be sent to and verified by the renderer. The renderer will deny any request without an auth token matching the one configured on the renderer side.
+;renderer_token = -
 # Concurrent render request limit affects when the /render HTTP endpoint is used. Rendering many images at the same time can overload the server,
 # which this setting can help protect against by only allowing a certain amount of concurrent requests.
 ;concurrent_render_request_limit = 30