ci: configure and stabilize CI/CD pipeline

- fix runner configuration issues
- correct workflow labels and execution environment
- resolve dependency issues in pipeline (python deps)
- improve reliability of automation runs

enterprise-infra-simulator/scenarios/failure_patch.md

@@ -0,0 +1,21 @@
+# Scenario: Simulate Failure and Patch
+
+## Description
+
+Validate that a service-level failure can be detected, recovered, and followed by a controlled patch workflow. This mirrors a maintenance window where a degraded node is stabilized before package updates are applied.
+
+## Commands
+
+```bash
+cd enterprise-infra-simulator
+./scripts/simulate_failure.sh service 30 web
+ansible-playbook -i inventory/hosts.ini playbooks/patch.yml
+ansible-playbook -i inventory/hosts.ini playbooks/hardening.yml --check
+```
+
+## Expected Result
+
+- The simulation records a temporary service failure.
+- The service is restored after cleanup.
+- The patch playbook completes without unreachable hosts.
+- Hardening check mode reports no destructive changes.