ref(roles): All roles use desired package state

By setting the `desired_package_state` variable we can change if ansible
should only ensure that the packages exist on the system (`present`) or
that they are also updated to their latest version (`latest`).

roles/fonts/tasks/main.yaml

@@ -2,7 +2,7 @@
 - name: Install many fonts
   community.general.xbps:
     name: "{{ fonts }}"
-    state: "{{ desired_package_state }}"
+    state: "{{ desired_package_state | default('present') }}"
   notify: installed-fonts
   when: fonts