fix: sysadmin requires groups

- add sysadmin/groups to base and firstrun

site/profiles/manifests/base.pp

@@ -28,6 +28,7 @@ class profiles::base (
     include profiles::base::hosts
     include profiles::base::groups
     include profiles::base::root
+    include profiles::accounts::sysadmin
     include profiles::ntp::client
     include profiles::dns::base
     include profiles::pki::vault

site/profiles/manifests/firstrun/init.pp

@@ -13,6 +13,7 @@ class profiles::firstrun::init {
   include profiles::base::motd
 
   # create the sysadmin account
+  include profiles::base::groups
   include profiles::accounts::sysadmin
 
   # mark the firstrun as done