feat(monitoring): add smartctl, fail2ban, wireguard exporters and dashboards

- smartctl_exporter (disks), fail2ban exporter, wireguard exporter
- grafana dashboards for each exporter
- prometheus: firewall source rules, honor_labels/params scrape config
- node_exporter: zfs collector
- wireguard: nftables dep, resolvconf wrapper, reload fix
- remove superseded monitoring role

roles/fail2ban/handlers/main.yml

@@ -4,3 +4,9 @@
     name: fail2ban
     daemon_reload: true
     state: restarted
+
+- name: Restart fail2ban_exporter
+  ansible.builtin.systemd:
+    name: fail2ban_exporter
+    daemon_reload: true
+    state: restarted