add --filter to ansible-playbook

Allow to select tasks by name or action filter.
also look in task.tags for --filter
playbook: Rename --filter to --only
Ask for sudo password on demand

- Add sudo_pass_callback to various classes
- Ask for sudo password once and cache the result
- Do not run sudo -k to avoid revoking the sudo ticket

TODO:
- Adjust all transports
- Support to ask again if password is wrong
- Support multiple hosts with different passwords
Verify sudo password when provided
Merge branch 'work-sudo_callback' into work