[COOK-4014] Move sysadmin group from template to attributes

https://tickets.opscode.com/browse/COOK-4014

This makes it possible to deactivate the sysadmin group if case it's not needed/present.

```ruby
node['authorization']['sudo']['groups'] = []
```