Fixes #29261 - Apply roles dynamically (#699)

We used to render the roles list on the server, which broke things with the move
to batch triggering, because it may have lead to application of roles which
weren't assign to a host.

With this change, we will take the roles from host's variables.