ansible-proxy-chain/openspec/changes/archive/2026-04-22-fix-ufw-ssh-ordering/tasks.md

1. Reorder UFW tasks in base role

• 1.1 Move SSH and port allow rules before UFW enable in roles/base/tasks/main.yml