First batch of Section 9

Starting with the check-only, script-heavy checks to get going with Ansible.
Made a new tag 'check-only' this way we get a true 'read-only' mode of operation that does not alter anything, just produces lists of things to manually review.
Please let me know if these are any good.