migrate sysadmin group from template to attribtues

with this, it's possible to deactivate the sysadmin group if case
it's not needed/present.

e.g. with overriding the attribute like so:

```ruby
node['authorization']['sudo']['groups'] = []
```