feat: prepare puppet for debian

- set yum::versionlock to be only for redhat family
- set puppet-agent require statement to use apt or yum
- remove requirement of downloading puppet7-release-$dist.deb
- create all paths in $base_path for vault certificate
- set correct $PATH for update-ca-certificates
- dynamically set debian release name
- split packages to install from common.yaml to os-specific
- create groups profile to manage local groups
- change sysadmin to be a member of admins group
- setup admins sudo rules

site/profiles/manifests/apt/puppet7.pp

@@ -30,27 +30,17 @@ class profiles::apt::puppet7 (
   Array[String] $managed_repos,
   String        $mirror,
   String        $repo,
-  String        $dist,
 ) {
 
   $codename = $facts['os']['distro']['codename']
 
   if 'puppet7' in $managed_repos {
-    $puppet_source = "${mirror}/${repo}-release-${dist}.deb"
-
-    # Install the puppet release using dpkg
-    package { "${repo}-${dist}":
-      ensure   => installed,
-      name     => "${repo}-release",
-      provider => dpkg,
-      source   => $puppet_source,
-    }
 
     # deb http://apt.puppet.com bullseye puppet7
     apt::source { 'puppet7':
       location => $mirror,
       repos    => $repo,
-      release  => $dist,
+      release  => $codename,
       include  => {
         'src' => false,
         'deb' => true,