feat(profiles): use /etc read only variable: etc_ro

apparmor.d/profiles-s-z/sudo

@@ -54,10 +54,10 @@ profile sudo @{exec_path} {
   /{usr/,}lib/cockpit/cockpit-askpass  rPx,
   /{usr/,}lib/molly-guard/molly-guard  rPx,
 
+  @{etc_ro}/environment r,
+  @{etc_ro}/security/limits.d/{,*} r,
   /etc/default/locale r,
-  /etc/environment r,
   /etc/machine-id r,
-  /etc/security/limits.d/{,*} r,
   /etc/sudo.conf r,
   /etc/sudoers r,
   /etc/sudoers.d/{,*} r,