include_recipe sysctl isn't required here.

We instead depend on base::managed to include the sysctl (and
nagios::client).  This prevents us from accidentally attempting to do a
search with berkshelf.  We set defaults here which only get picked up if
the node has the other cookbooks included.