GitLab

also assign ansible responsible to each ticket and mr by default

- Add root ca
- Delete old self-signed cert that was succeeded by a KIT-CA signed one.

see issue #84

obelix has no dedicated user, too

* Set autoupdate default to lab computers
* Create a new sub-group for the lab, so that one can handle their
  specific behaviour more easily (see
https://docs.ansible.com/ansible/latest/user_guide/intro_inventory.html#inheriting-variable-values-group-variables-for-groups-of-groups )

* The handler set the network down and then set the same network up
  again and not the new KITnet. So if the old network was not KITnet
(which is the case on newly installed machines or any machine that
hasn't been merged manually).
  Now KITnet is started.

* Set the environment varible for EPICS IOCs depending on the environment
  (meant for KARA, LASMagLab or TGU)
  * Use groups and vars in host file to manage these different cases
* Fix problems with the DHCPd role
  * host lists were at wrong location (may be this can be improved)
  * one should check explicitly for variable names (linter warning)

* Use git submodule to have to update the scripts at one place only
* Change the path in the role and delete the old script