use ansible blocks with tags, also use standard layout

ansible/roles/win_update/tasks/update.yml

@@ -1,31 +1,30 @@
 ---
-- name: Clear update cache
-  win_shell: |
-    UsoClient RefreshSettings
-    UsoClient ScanInstallWait
+- name: Update VM
+  tags: update_vm
+  block:
+    - name: Clear update cache
+      win_shell: |
+        UsoClient RefreshSettings
+        UsoClient ScanInstallWait
 
-- name: Update Windows
-  ansible.windows.win_updates:
-    category_names: '*'
-    skip_optional: true
-    reboot: true
-    reboot_timeout: 3600
-  vars:
-    ansible_become: true
-    ansible_become_pass: "{{ ansible_password }}"
-    ansible_become_user: Administrator
-  ignore_errors: true
+    - name: Update Windows
+      ansible.windows.win_updates:
+        category_names: '*'
+        skip_optional: true
+        reboot: true
+        reboot_timeout: 3600
+      ignore_errors: true
 
-- name: Update Windows (again)
-  ansible.windows.win_updates:
-    category_names: '*'
-    reboot: true
-    reboot_timeout: 3600
-  ignore_errors: true
+    - name: Update Windows (again)
+      ansible.windows.win_updates:
+        category_names: '*'
+        reboot: true
+        reboot_timeout: 3600
+      ignore_errors: true
 
-- name: Logging action
-  vars:
-    ansible_connection: local
-  ansible.builtin.shell:
-    cmd:  echo "Update {{ os_project }}-{{ ansible_hostname }} $(date '+%Y-%m-%d %H:%M:%S')" >> /deployments/{{ os_project }}-{{ win_project }}/action.log
-  delegate_to: localhost
+    - name: Logging action
+      vars:
+        ansible_connection: local
+      ansible.builtin.shell:
+        cmd:  echo "Update {{ os_project }}-{{ ansible_hostname }} $(date '+%Y-%m-%d %H:%M:%S')" >> /deployments/{{ os_project }}-{{ win_project }}/action.log
+      delegate_to: localhost