Install openbao-plugin-secrets-rancher on vault nodes

Lays down the rancher secrets-engine plugin binary in the OpenBao plugin
directory (/opt/openbao-plugins/vault-plugin-secrets-rancher) so terraform-vault
can register and mount it. Package comes from the rpm-internal repo.

- Add openbao-plugin-secrets-rancher to profiles::packages::include on the vault
  storage role.

hieradata/os/AlmaLinux/all_releases.yaml

@@ -85,13 +85,6 @@ profiles::yum::global::repos:
     baseurl: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/local/rpm-internal/
     gpgcheck: false
     mirrorlist: absent
-  rpm-vendor:
-    name: rpm-vendor
-    descr: rpm-vendor repository
-    target: /etc/yum.repos.d/rpm-vendor.repo
-    baseurl: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/local/rpm-vendor-el%{facts.os.release.major}/
-    gpgcheck: false
-    mirrorlist: absent
 
   # Additional repositories - default to absent, roles can override with ensure: present
   # FRRouting repositories

hieradata/roles/infra/storage/vault.yaml

@@ -30,3 +30,4 @@ profiles::packages::include:
   openbao-plugins: {}
   openbao-plugin-secrets-litellm: {}
   openbao-plugin-secrets-gpg: {}
+  openbao-plugin-secrets-rancher: {}