added a validate role that would only be run when running non-staging or...

... development playbooks.

This role verifies that the development/testing gpg keys, ossec alert email address, and sasl credentials are not used for production
There are two sets of test keys in our repo 1 set for the App gpg keypair and 1 set for the Admin OSSEC alert gpg keypair. I thought it was confusing that we recommend/require those to be separate keypairs for production but did not reflect that for staging.