kubelet: Configure cri-o container registries

The _containers-image_ role configures _containers-registries.conf(5)_ and
_containers-cert.d(5)_, which are used by CRI-O (and `podman`).
Specifically, we'll use these to redirect requests for images on Docker
Hub (docker.io) to the internal caching proxy.

roles/kubelet/meta/main.yml

@@ -3,3 +3,4 @@ dependencies:
 - role: cri-o
   tags:
   - cri-o
+- containers-image