refactor(standardize): fix sudoers lecture syntax, extract ssh config, remove redundant os filters

roles/configuration/tasks/sudo.yml

@@ -1,4 +1,12 @@
 ---
+- name: Ensure sudoers.d directory exists
+  ansible.builtin.file:
+    path: /mnt/etc/sudoers.d
+    state: directory
+    mode: "0755"
+    owner: root
+    group: root
+
 - name: Give sudo access to wheel group
   ansible.builtin.copy:
     content: "{{ '%sudo ALL=(ALL) ALL\n' if is_debian | bool else '%wheel ALL=(ALL) ALL\n' }}"