feat(lynis): declare 'lynis' module (with profile + skips)

hosts/eetion-02/default.nix

@@ -14,6 +14,7 @@ in
 
   inherit (meta) host;
 
+  lynis.enable = true;
   ssh.enable = true;
   tailscale.enable = true;
   wol.wakes = [ "andromache" ];