fix: manage git user

- prevent different gid/uid for git users when deploying cluster
- only add sudo conf when sudo_rules is a list

hieradata/roles/infra/git/server.yaml

@@ -2,6 +2,7 @@
 hiera_include:
   - profiles::sql::postgresdb
   - profiles::nginx::simpleproxy
+  - profiles::gitea::user
   - gitea
 
 # additional altnames
@@ -36,6 +37,9 @@ profiles::consul::client::node_rules:
     segment: git
     disposition: write
 
+# manage the gitea user
+profiles::gitea::user::manage: true
+
 # manage a simple nginx reverse proxy
 profiles::nginx::simpleproxy::nginx_vhost: 'git.query.consul'
 profiles::nginx::simpleproxy::nginx_aliases:
@@ -55,6 +59,9 @@ profiles::sql::postgresdb::dbuser: gitea
 
 gitea::ensure: '1.22.4'
 gitea::checksum: 'd549104f55067e6fb156e7ba060c9af488f36e12d5e747db7563fcc99eaf8532'
+gitea::manage_user: false
+gitea::manage_group: false
+gitea::manage_home: false
 gitea::custom_configuration:
   '':
     APP_NAME: 'Gitea'