There's nothing built in to Ansible to manage Copr repos, so running the command is fine, but you should make it idempotent by not running it if the repo is already installed.
- name: Install copr repo konimex/neofetch
cmd: dnf -y copr enable konimex/neofetch
This is a situation where you should virtualize the workload.
Use VMware ESXi or an open-source alternative to leverage modern hardware, coupled with a guest OS running the preferred variant of RHEL.
Lean on your vendor to provide customer references or other examples of how this is handled in their other environments.
I think you may be confused about how disk encryption works.
So far, I know ways to encrypt the file or the entire filesystem can be decrypted and would stay that way until it is encrypted again. I am looking for a temporary decryption.
When you use full-disk encryption with dm-crypt/luks or veracrypt, the data on the disk remain encrypted at all times. ...