importriri/hyperlab-ansible ? reverse-engineered prompt

Build me an Ansible setup for an Arch laptop that turns a clean encrypted install into a KVM and VFIO based hypervisor lab.

I want one main playbook that first gets the host ready, then sets up the normal desktop, then adds the Looking Glass transport for VM use. It should keep the physical host small, use the iGPU for the desktop, reserve the NVIDIA dGPU for passthrough, and keep services running inside VMs instead of on the host.

Please make the setup safe and explicit, so it does not create or destroy private workloads unless I run separate playbooks for image import, VM lifecycle, or service registration. Include checks and validation so I can run it in verify mode first, then apply it, and run it again until there are no changes.

If you need to, look up current Ansible or Arch docs online. Also keep the roles and playbooks organized so each part has one clear job.