feat: prepare puppet for debian

- set yum::versionlock to be only for redhat family
- set puppet-agent require statement to use apt or yum
- remove requirement of downloading puppet7-release-$dist.deb
- create all paths in $base_path for vault certificate
- set correct $PATH for update-ca-certificates
- dynamically set debian release name
- split packages to install from common.yaml to os-specific
- create groups profile to manage local groups
- change sysadmin to be a member of admins group
- setup admins sudo rules

site/profiles/manifests/pki/vaultca.pp

@@ -30,7 +30,7 @@ class profiles::pki::vaultca {
   # Execute the system command to update the CA trust store
   exec { 'update_ca_trust_store':
     command     => $update_ca_cert_command,
-    path        => ['/bin', '/usr/bin'],
+    path        => ['/bin', '/usr/bin', 'sbin', '/usr/sbin'],
     refreshonly => true,
     require     => File[$ca_cert_target_path],
   }