Refactor Argo CD application management by removing noble-kyverno and noble-platform configurations, transitioning to Ansible-driven installations. Update documentation to clarify the optional nature of app-of-apps and the role of kustomization.yaml as an empty resource holder. Ensure users are informed about the need to delete stale Applications when migrating from previous configurations.

ansible/roles/talos_bootstrap/defaults/main.yml

@@ -0,0 +1,3 @@
+---
+# Set **true** to run `talhelper genconfig -o out` under **talos/** (requires talhelper + talconfig).
+noble_talos_genconfig: false

ansible/roles/talos_bootstrap/tasks/main.yml

@@ -0,0 +1,36 @@
+---
+- name: Generate Talos machine configs (talhelper genconfig)
+  when: noble_talos_genconfig | bool
+  block:
+    - name: Validate talconfig
+      ansible.builtin.command:
+        argv:
+          - talhelper
+          - validate
+          - talconfig
+          - talconfig.yaml
+      args:
+        chdir: "{{ noble_repo_root }}/talos"
+      changed_when: false
+
+    - name: Generate Talos configs (out/)
+      ansible.builtin.command:
+        argv:
+          - talhelper
+          - genconfig
+          - -o
+          - out
+      args:
+        chdir: "{{ noble_repo_root }}/talos"
+      changed_when: true
+
+    - name: Post genconfig — next steps
+      ansible.builtin.debug:
+        msg: >-
+          Configs are in talos/out/. Apply to nodes, bootstrap, and kubeconfig per talos/README.md
+          before running playbooks/noble.yml.
+
+- name: Skip when noble_talos_genconfig is false
+  ansible.builtin.debug:
+    msg: "No-op: pass -e noble_talos_genconfig=true to run talhelper genconfig."
+  when: not (noble_talos_genconfig | bool)