Move security plugins under security namespace

Author: marcofortina

docs/guides/account-access.md

@@ -9,8 +9,8 @@ Automax includes account access plugins for common Linux operator tasks:
 
 - `user.exists`, `user.lock`, `user.unlock`, `user.set_password`
 - `group.exists`
-- `ssh.authorized_key`
-- `sudoers.dropin`
+- `security.ssh.authorized_key.add`
+- `security.sudo.dropin`
 
 Use `password_hash` with `user.set_password` whenever possible. Plaintext passwords are supported for operational compatibility, but command secrets or file secrets are preferred.
 
@@ -25,7 +25,7 @@ Use `password_hash` with `user.set_password` whenever possible. Plaintext passwo
 
 ```yaml
 - id: install_deploy_key
-  use: ssh.authorized_key
+  use: security.ssh.authorized_key.add
   with:
     user: deploy
     key: "{{ vars.deploy_public_key }}"
@@ -35,7 +35,7 @@ Use `password_hash` with `user.set_password` whenever possible. Plaintext passwo
 
 ```yaml
 - id: allow_restart
-  use: sudoers.dropin
+  use: security.sudo.dropin
   with:
     name: deploy-myapp
     content: "deploy ALL=(root) /bin/systemctl restart myapp"

docs/guides/linux-security-modules.md

@@ -11,25 +11,25 @@ Automax supports SELinux and AppArmor workflows without hiding distribution diff
 
 ```yaml
 - id: allow_http_network
-  use: selinux.boolean
+  use: security.selinux.boolean
   with:
     name: httpd_can_network_connect
     value: true
     persist: true
     sudo: true
 ```
 
-Available plugins include `selinux.mode`, `selinux.boolean`, `selinux.context` and `selinux.restorecon`.
+Available plugins include `security.selinux.mode`, `security.selinux.boolean`, `security.selinux.context` and `security.selinux.restorecon`.
 
 ## AppArmor
 
 ```yaml
 - id: enforce_nginx_profile
-  use: apparmor.profile
+  use: security.apparmor.profile
   with:
     profile: /etc/apparmor.d/usr.sbin.nginx
     state: enforce
     sudo: true
 ```
 
-Available plugins include `apparmor.status`, `apparmor.profile` and `apparmor.reload`.
+Available plugins include `security.apparmor.status`, `security.apparmor.profile` and `security.apparmor.reload`.