Add consistent way to pass in vars without hashicorp vault

[jonathanspw]

For development and testing purposes very few people will have access to our secrets storage so having a built-in and consistent way to pass in vars will help make it easier for people to test and develop on the playbook and thus contribute.

I'm not sure what this might look like. Environment variables seem like an obvious choice but maybe there's a better way. This needs research.