Enable the sshd role in playbooks/all-hosts-basic

Move the 'sshd_enable_includes' override to aur's host vars instead of
specifying it as part of playbooks/aur.archlinux.org. Otherwise, would
break the AUR's SSH auth if ssh.d/aurweb_config does not get included.

host_vars/aur.archlinux.org/misc

 filesystem: btrfs
 memcached_socket: "/run/memcached/aurweb.sock"
+sshd_enable_includes: true
 wireguard_address: 10.0.0.2
 wireguard_public_key: TPLeGQ7qU6ZNtcgDbEV0SSYScvK+XS5igcPdGSXo6UA=

playbooks/all-hosts-basic.yml

@@ -5,8 +5,7 @@
     - { role: common }
     - { role: firewalld }
     - { role: wireguard }
-    # reconfiguring sshd may break the AUR on luna (unchecked)
-    # - { role: sshd, tags: ['sshd'] }
+    - { role: sshd }
     - { role: root_ssh }
     - { role: borg_client, tags: ["borg"], when: "'borg_clients' in group_names" }
     - { role: hardening }

playbooks/aur.archlinux.org.yml

@@ -3,7 +3,7 @@
   remote_user: root
   roles:
     - { role: common }
-    - { role: sshd, sshd_enable_includes: true }
+    - { role: sshd }
     - { role: root_ssh }
     - { role: prometheus_exporters }
     - { role: promtail }