Runbook: Users Groups Sudo
Focus: Benutzer, Gruppen und sudoers-Modell

1. Run ./run.sh.
2. Inspect work/evidence/.
3. Review service, network, package and security outputs.
4. Remove work/ after collecting evidence.
