Add new model files and update Ansible playbooks for Qwen3.5 and Qwen3.6

- Created model files for Qwen3.5 with different context lengths.
- Added a new Ansible host variable file for CI server configuration.
- Updated GPU server host variables to include Ollama models and model files.
- Enhanced playbooks for Podman to manage Ollama models, including copying model files and checking existing models.
- Introduced a new playbook for setting up Qwen3.6 with specific configurations.
- Updated Windows SSH tasks to improve security and configuration management.
- Added a Python utility to parse Ollama model names from command output.
- Modified Terraform configurations to include new DNS entries and proxy settings.
- Improved Nginx proxy configurations with timeout settings.

ansible/templates/windows_sshd_config.j2

@@ -0,0 +1,49 @@
+# Ansible managed
+AcceptEnv LANG LC_*
+AllowAgentForwarding no
+AllowGroups provision users
+AllowTcpForwarding yes
+AuthenticationMethods any
+Banner __PROGRAMDATA__/ssh/issue.net
+ChallengeResponseAuthentication no
+Ciphers {{ __ssh_ciphers__ | join(',') }}
+ClientAliveCountMax 1
+ClientAliveInterval 200
+Compression no
+GSSAPIAuthentication no
+HostbasedAuthentication no
+HostKeyAlgorithms {{ __ssh_hostkey_algorithms__ | join(',') }}
+AuthorizedKeysFile .ssh/authorized_keys
+PubkeyAcceptedAlgorithms {{ __ssh_pubkey_accepted_algorithms__ | join(',') }}
+IgnoreUserKnownHosts yes
+{% set __ssh_supported_kex__ = ssh_supported_kex.stdout_lines | default([]) | map('trim') | reject('equalto', '') | list %}
+{% set __ssh_effective_kex__ = (__ssh_kex_algorithms__ | intersect(__ssh_supported_kex__)) if (__ssh_supported_kex__ | length > 0) else __ssh_kex_algorithms__ %}
+{% if __ssh_effective_kex__ | length > 0 %}
+KexAlgorithms {{ __ssh_effective_kex__ | join(',') }}
+{% endif %}
+LoginGraceTime 20
+LogLevel VERBOSE
+Macs {{ __ssh_macs__ | join(',') }}
+MaxAuthTries {{ __ssh_max_auth_tries__ }}
+MaxSessions {{ __ssh_max_sessions__ }}
+MaxStartups 10:30:60
+PasswordAuthentication no
+PermitEmptyPasswords no
+PermitRootLogin no
+PermitUserEnvironment no
+Port 22
+PrintLastLog yes
+PrintMotd no
+RekeyLimit 512M 1h
+RequiredRSASize 2048
+StrictModes yes
+TCPKeepAlive no
+UseDNS no
+X11Forwarding no
+Subsystem sftp internal-sftp
+{% if __ssh_subsystem_path__ | default('') | length > 0 %}
+Subsystem powershell "{{ __ssh_subsystem_path__ }}" -sshs -NoLogo -NoProfile
+{% endif %}
+Match Group administrators
+       AuthorizedKeysFile __PROGRAMDATA__/ssh/administrators_authorized_keys
+