refactor(viridian): improve remote deployment security

- Remove passwordless sudo for wheel group
- Update deploy command to use -S flag for sudo password prompt
- Maintain secure remote access while enabling deployments

justfile

@@ -8,5 +8,4 @@ switch *ARGS:
   sudo nixos-rebuild switch --flake .#{{ARGS}}
 
 deploy *ARGS:
-  nixos-rebuild switch --flake .#{{ARGS}} --target-host {{ARGS}} --use-remote-sudo
-
+  nixos-rebuild switch -S --flake .#{{ARGS}} --target-host {{ARGS}}

nixos/viridian/configuration.nix

@@ -49,9 +49,6 @@
     oci-containers.backend = "docker";
   };
 
-  # Required for smooth remote deployments
-  security.sudo.wheelNeedsPassword = false;
-
   # https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion
   system.stateVersion = "24.05";
 }