rf: use ansible-pull