sd-dom0-files.sls is ran twice:

1. when provisioning the base template
2. when provisioning everything else (via state.highstate)

This is not really critical because SaltStack is idempotent, but it is not necessary.

The reason this happens is because sd-base-template.sls includes the dom0 configuration formula, just to have the debian-12 template installed. We should move those two together.