refactor(standardize): fix sudoers lecture syntax, extract ssh config, remove redundant os filters

roles/configuration/tasks/encryption.yml

@@ -136,7 +136,7 @@
         mode: "0644"
 
     - name: Configure mkinitcpio hooks for LUKS
-      when: os | lower == 'archlinux'
+      when: os == 'archlinux'
       ansible.builtin.lineinfile:
         path: /mnt/etc/mkinitcpio.conf
         regexp: "^HOOKS="
@@ -145,13 +145,13 @@
           block sd-encrypt lvm2 filesystems fsck)
 
     - name: Read mkinitcpio configuration
-      when: os | lower == 'archlinux'
+      when: os == 'archlinux'
       ansible.builtin.slurp:
         src: /mnt/etc/mkinitcpio.conf
       register: configuration_mkinitcpio_slurp
 
     - name: Build mkinitcpio FILES list
-      when: os | lower == 'archlinux'
+      when: os == 'archlinux'
       vars:
         mkinitcpio_files_list: >-
           {{
@@ -180,7 +180,7 @@
         configuration_mkinitcpio_files_list_new: "{{ mkinitcpio_files_list_new }}"
 
     - name: Configure mkinitcpio FILES list
-      when: os | lower == 'archlinux'
+      when: os == 'archlinux'
       ansible.builtin.lineinfile:
         path: /mnt/etc/mkinitcpio.conf
         regexp: "^FILES="