feat(lynis): declare 'lynis' module (with profile + skips)

hosts/andromache/default.nix

@@ -43,6 +43,7 @@ in
   };
   keyboard.enable = true;
   localization.enable = true;
+  lynis.enable = true;
   memory.zram.enable = true;
   my = {
     fonts.enable = true;

hosts/astyanax/default.nix

@@ -43,6 +43,7 @@ in
   hardening.enable = true;
   keyboard.enable = true;
   localization.enable = true;
+  lynis.enable = true;
   memory = {
     oom.enable = true;
     zram.enable = true;

hosts/eetion-02/default.nix

@@ -14,6 +14,7 @@ in
 
   inherit (meta) host;
 
+  lynis.enable = true;
   ssh.enable = true;
   tailscale.enable = true;
   wol.wakes = [ "andromache" ];

hosts/eetion/default.nix

@@ -14,6 +14,7 @@ in
 
   inherit (meta) host;
 
+  lynis.enable = true;
   ssh.enable = true;
   tailscale.enable = true;
 

hosts/hecuba/default.nix

@@ -32,6 +32,7 @@ in
   };
   docker.enable = true;
   hardening.enable = true;
+  lynis.enable = true;
   secrets.enable = true;
   ssh.enable = true;
   tailscale.enable = true;