bump(app-admin/sudo): sync with upstream