fix(security): harden installation with scoped sudo, fail2ban, and auto-updates#11

alauppe merged 2 commits intoopenclaw:mainopenclaw/openclaw-ansible:mainfrom

alauppe:fix/security-hardeningalauppe/clawdbot-ansible:fix/security-hardeningCopy head branch name to clipboard