feat: use ansible block

tasks/apt/cleanup.yaml

@@ -1,18 +1,22 @@
 ---
 
-# clean apt cache
-- name: "apt - clean cache"
-  ansible.builtin.apt:
-    clean: true
-  changed_when: false
-  failed_when: false
-  tags: "apt-cleanup"
-  when: 'ansible_os_family == "Debian"'
+# apt cleanup
+- name: "apt cleanup"
+  block:
+
+    # clean apt cache
+    - name: "apt - clean cache"
+      ansible.builtin.apt:
+        clean: true
+      changed_when: false
+      failed_when: false
+      when: 'ansible_os_family == "Debian"'
+
+    # run fstrim if target is a VM
+    - name: "fstrim"
+      ansible.builtin.command: "fstrim /"
+      changed_when: false
+      failed_when: false
+      when: 'type == "vm"'
 
-# run fstrim if target is a VM
-- name: "fstrim"
-  ansible.builtin.command: "fstrim /"
-  changed_when: false
-  failed_when: false
   tags: "apt-cleanup"
-  when: 'type == "vm"'