Lean-sudo: drop-in replacement with formally verified policy, env, and auth

Lean-sudo: drop-in replacement with formally verified policy, env, and auth: Lean-sudo: drop-in replacement with formally verified policy, env, and auth helps c