Add `when: not ansible_check_mode` to the slurp and set_fact tasks so that dry runs don't fail when .secrets hasn't been created yet. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>