[#385] ssh_ca handler: distro-tolerant reload (sshd vs ssh service names)

preprod-cloudron runs Ubuntu-derived Cloudron OS where the unit is ssh,
not sshd. Both reload paths fire under one listen keyword; failures are
non-fatal (config already validated by sshd -t).
https://projects.knownelement.com/issues/385

roles/ssh_ca/handlers/main.yml

@@ -1,5 +1,17 @@
 ---
+# sshd service name varies: Debian = sshd, Ubuntu/Cloudron = ssh
 - name: reload sshd
-  ansible.builtin.systemd:
-    name: sshd
-    state: reloaded
+  ansible.builtin.command: systemctl reload ssh
+  failed_when: false
+  changed_when: true
+  listen: "reload ssh ca"
+
+- name: reload ssh service
+  ansible.builtin.command: systemctl reload sshd
+  failed_when: false
+  changed_when: true
+  listen: "reload ssh ca"
+
+- name: confirm reload succeeded on at least one name
+  ansible.builtin.set_fact:
+    ssh_ca_reload_ok: true