defaults: update url to canonical hg repo

tasks: don't install .hgrc with hostfingerprints Recent Mercurial/Python versions are a lot better with certificates and HTTPS.

hgweb.conf: move staticurl closer to other urls

playbook: instead of restarting things in post_tasks, just include handlers

playbook: rephrase the first note a bit

role vars are now legit super evil, confirmed by Ansible 2.1.0.0 They are so extremely high-priority now that they cannot be redefined in a playbook. At least defaults should work as expected?

use a more YAMLy syntax everywhere Some lines were getting out of hand length-wise.

prefix all role variables

(none)

drop some defaults and unrelated config directives from supervisor config - process_name defaults to the part after "program:" - stopsignal defaults to SIGTERM, which also works fine for hgweb - numprocs defaults to 1 - autorestart defaults to "unexpected", which is fine and is less surprising