fix: install sysctl so minimal template can use it

roles/baseline/tasks/main.yaml

@@ -49,6 +49,12 @@
   - 'etc/modprobe.d/workstation-blacklist.conf'
   - 'etc/crypto-policies/back-ends/openssh.config'
 
+- name: Install sysctl
+  ansible.builtin.dnf5:
+    name:
+      - 'procps-ng'
+    state: 'present'
+
 - name: Kernel sysctl config
   ansible.builtin.template:
     src: 'etc/sysctl.d/99-workstation.conf.j2'