Does an ansible-vault module exist, which does the same as the shell task:
shell: ansible-vault encrypt {{ users_pw_hash }}
Or even better: does a module exist, which can be used to update some data in encrypted YAML vault files?
no module like that currently exists, it would probably not work as modules don’t have access to the passwords passed in the command line.
You can specify vault_password_file in ansible.cfg.