Prevent blowup in Ansible when clauses

[noahl]

Currently we track task dependencies directly in Ansible, which leads to blowup when there is a chain of dependencies. Solution is to give each Ansible fact a unique variable to trigger, then track dependencies in Python where we can do a transitive closure.