Skip apt upgrade and reboot during update-users

Previously, running `./algo update-users` would trigger a full apt upgrade
and potentially reboot the server because ubuntu.yml was tagged with
`update-users`. This caused unexpected disconnections for all VPN clients
(gaming, downloads, etc.) during what should be a simple user management
operation.

Now only facts.yml runs during update-users, which provides the necessary
password facts for IPsec certificate generation without running apt upgrade
or triggering reboots.

Fixes #14518

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Author: dguido

roles/common/tasks/main.yml

@@ -11,10 +11,12 @@
 
 - include_tasks: ubuntu.yml
   when: '"Ubuntu" in OS.stdout or "Linux" in OS.stdout'
+
+# Include facts separately for update-users (skips apt upgrade/reboot in ubuntu.yml)
+- include_tasks: facts.yml
   tags:
     - update-users
 
-
 - name: Sysctl tuning
   sysctl: name="{{ item.item }}" value="{{ item.value }}"
   when: item.item is defined and item.item != none