top.sls: use sudoers formula

Also remove our previous rudimentary sudo state.
set up sudo group properly