Local configuration disclosure via permissive deployment directory

Incorrect default permissions in OpenStack tripleo-ansible allow local users to read sensitive deployment configuration from a discoverable directory. The /var/lib/mistral/overcloud directory remains searchable enough for brute-force filename discovery, exposing sensitive files beneath it. A low-privileged account on the undercloud host is required; the reported impact is disclosure of deployment details without modification or service interruption.