feat: Add Kong API Gateway deployment role

[pparage]

Problem

No Ansible role exists for deploying Kong API Gateway. The demo_lab creates a VM for Kong (admin-web-api-kong, VMID 1020) but the VM has no Kong installed or configured.

Needed

A catalog role (e.g., software.install.kong) that:

1. Installs Kong (via apt repo or Docker)
2. Configures Kong to proxy the backend API
3. Sets up service/route definitions for Range42 endpoints
4. Optionally enables authentication plugins

Context

Kong sits between the deployer-ui and backend-api, handling auth, rate limiting, and TLS termination. Without it, the UI must connect directly to the backend.

Related

• Tracked in range42/project_management#66