Ansible style variable interpolation (with spaces) + sha256 for geoserver
Only install geoserver if a new war was downloaded
Remove webupd8-key, PPAs have their own trust path(?)