feat: add sudo secure_path

- update the sudo class from an include to a definition
- set the secure_path variable to include /usr/local/{bin,sbin}

site/profiles/manifests/base.pp

@@ -32,7 +32,9 @@ class profiles::base (
   }
 
   # all hosts will have sudo applied
-  include sudo
+  class { 'sudo':
+    secure_path => '/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin:/opt/puppetlabs/bin'
+  }
 
   # default users
   include profiles::accounts::sysadmin