In 2023, we'd like to hook Puppet into CI. This can mean many things, but it will at least mean:

• server-side validation checks (team#31226, aka "you broke puppet here")
• deployment through a role account (team#29663 (closed))
• publish the puppet repository at long last (team#29387)
• puppet 7 server and agent upgrade (team#33588 (closed), team#40707 (closed), overlaps with %Debian 12 bookworm upgrade)

Ideally, we'd also be able to publish dynamic environments to test larger changes (team#40861) and also, why not, actual unit tests in CI, although those are not mandatory here.

This is a smaller, more focused version of %cleanup and publish the sysadmin codebase which was too broad in scope, but that is kept to collect the dust on all that good wishful thinking.