moved the common role's default/main.yml variables to the group_vars/securedrop.yml
added group_vars/securedrop.yml and resepective host_var files to each playbook.
fixed typo regex to regexp
moved variables from securedrop-development-conf.yml to host_vars/development.yml
and removed the old file from the development playbook
moved variables from securedrop-app-staging-conf.yml to host_vars/app.yml and the group_vars/securedrop.yml as needed
split up the securedrop-app-code dev_dependencies and the test_dependencies
removed the old ansible-securedrop role
normalized building the ossec packages
now there is just one role to build the securedrop ossec server and ossec agent deb packages
and there is a separate role to build the securedrop-app-code deb package

This ensure that tasks are not duplicated across roles
split the allow direct access tasks to its own role to reduce task duplication
removed refs to chroots in apparmor profiles. These still need to be updated for all the changes to the app code though