remove 7dtd mods, re-enable EAC; stop storing become password in vars

roles/7dtd/tasks/main.yml

@@ -35,8 +35,18 @@
 
 # Mods live in the bind-mounted serverfiles; the container loads them on its next start
 # (recreate on every deploy re-reads them). zips come from roles/7dtd/files/mods (sdtd_mods
-# in vars.yml), extracted one level deep (the zips already carry their own _Singularity/
-# and zByteblazarsNoRespawnNearBackpack/ subfolders, which fix load order by name).
+# in vars.yml), extracted one level deep (each zip carries its own mod subfolder; prefix
+# folders with z- if they must sort LAST for load order). unarchive only ADDS — it never
+# removes, so a mod dropped from sdtd_mods would keep loading: with an empty list we wipe
+# the whole dir and the create-task below rebuilds it empty. Partial mod swaps are not
+# auto-cleaned (the role only knows zip names, not the folders zips unpack into) — remove
+# those retired folders from the box by hand.
+- name: Remove 7 Days to Die Mods directory when no mods are deployed
+  ansible.builtin.file:
+    path: /opt/apps/7dtd/serverfiles/Mods
+    state: absent
+  when: sdtd_mods | length == 0
+
 - name: Create 7 Days to Die Mods directory (container user)
   ansible.builtin.file:
     path: /opt/apps/7dtd/serverfiles/Mods