check-mode
Turn ansible-playbook --check --diff into a readable, PR-postable preview. Groups changes by host, renders clean diffs, and flags tasks that silently can't be previewed.