sysctl and puppet specs

* move sysctl to be implemented via `thias/sysctl`
* add specs to sysctl parameters
* fix current sysctl errors: arp restriction and sysrq settings