Split network validation to it's own play

When we moved the network deployment to free, we can hit a race
condition where some nodes are being configured prior to the controllers
being ready. This can lead to the basic network validation failing.  We
can deal with this by moving the validation to it's own play so that we
ensure all network configurations have occurred prior to to checking
that nodes can ping the controllers.

Change-Id: I48665379a87e701633be1bcc90bd8be1cc75c513
Closes-Bug: #1913725

common/deploy-steps.j2

@@ -577,6 +577,19 @@ outputs:
                     tripleo_network_config_safe_defaults: "{{ network_safe_defaults }}|bool"
                   when:
                     - tripleo_network_config_with_ansible or NetworkConfig_stat.stat.exists
+              tags:
+                - overcloud
+                - pre_deploy_steps
+                - network_deploy_steps
+{% endraw %}
+
+            - hosts: {{primary_role_name}}:DEPLOY_TARGET_HOST
+              strategy: tripleo_free
+              name: Server network validation
+              gather_facts: "{% raw %}{{ gather_facts | default(false) }}{% endraw %}"
+              any_errors_fatal: yes
+              tasks:
+{% raw %}
                 - name: Basic Network Validation
                   include_role:
                     name: tripleo_nodes_validation