refactor(standardize): fix sudoers lecture syntax, extract ssh config, remove redundant os filters

roles/global_defaults/defaults/main.yml

@@ -15,7 +15,7 @@ hypervisor_defaults:
   ssh: false
 
 custom_iso: false
-thirdparty_preparation_tasks_path: "dropins/preparation.yml"
+thirdparty_tasks: "dropins/preparation.yml"
 
 system_defaults:
   type: "virtual" # virtual|physical

roles/global_defaults/tasks/main.yml

@@ -14,8 +14,8 @@
 
 - name: Set OS family flags
   ansible.builtin.set_fact:
-    is_rhel: "{{ os | lower in ['almalinux', 'fedora', 'rhel', 'rocky'] }}"
-    is_debian: "{{ os | lower in ['debian', 'ubuntu', 'ubuntu-lts'] }}"
+    is_rhel: "{{ os in ['almalinux', 'fedora', 'rhel', 'rocky'] }}"
+    is_debian: "{{ os in ['debian', 'ubuntu', 'ubuntu-lts'] }}"
 
 - name: Normalize OS version for keying
   when: