3f83e77ec7
Check each host for pending packages before upgrading, then print a per-host status (updated with the package list, up to date, or failed) and one consolidated summary play with totals. Failed upgrades are caught per host so they are reported instead of dropping out of the run, and a final fail task keeps the run non-zero. The read-only cache refresh and pending checks run with check_mode: false, so --check works as a dry run.