feat: tilføj sudoers-regel for shutdown uden password

Opretter /etc/sudoers.d/shutdown-nopasswd så brugeren kan køre
/sbin/shutdown uden sudo-password — nødvendigt for shutdown/reboot
scripts. Syntaks valideres med visudo inden filen skrives.

tasks/system.yml

@@ -17,6 +17,14 @@
     enabled: true
     state: started
 
+- name: System - tillad shutdown uden password (til scripts)
+  ansible.builtin.lineinfile:
+    path: /etc/sudoers.d/shutdown-nopasswd
+    line: "{{ actual_user.stdout }} ALL=(ALL) NOPASSWD: /sbin/shutdown"
+    create: true
+    mode: '0440'
+    validate: 'visudo -cf %s'
+
 - name: System - resolv.conf symlink (NetworkManager + systemd-resolved fix)
   ansible.builtin.file:
     src: /run/systemd/resolve/stub-resolv.conf