feat: switch to using workload-centric roles
Previously we would specify a role for every get_secrets()
call but
we've switched to using a role-per-workload model so we will always use
the same role for any one node.
BREAKING CHANGE: requires updates to the "path" in the chef roles.
Related issue: https://gitlab.com/gitlab-com/gl-infra/reliability/-/issues/16308