.github: merge ci and ansible workflows, fix ansible-lint

These need to both always run because github doesn't allow you to put
conditions on requiring check passes for branch protection

.github/workflows/ci.yml

@@ -2,8 +2,6 @@ name: Continuous integration
 
 on:
   pull_request:
-    paths-ignore:
-      - 'ansible/**'
     types:
       - opened
       - reopened
@@ -84,3 +82,25 @@ jobs:
       - name: Run Go tests
         working-directory: migrations
         run: go test -v ./...
+
+  ansible-format:
+    name: Check yaml formatting of ansible files
+    runs-on: ubuntu-latest
+    container: ghcr.io/google/yamlfmt:latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Check yaml format
+        working-directory: ansible
+        run: yamlfmt -lint
+
+  ansible-lint:
+    name: Lint ansible files
+    runs-on: ubuntu-latest
+    steps:
+      - name: Run ansible-lint
+        uses: ansible/ansible-lint@main
+        with:
+          setup_python: "true"
+          working_directory: "ansible"
+          requirements_file: "requirements.yml"