Completes run-if/set_variable and requires_sudo editing, sudoers path resolve helpers, and execute permission checks so node action groups can gate upgrades and elevate safely.
Admins can manage built-in and custom actions with placeholders, ENV vars, and actions.create/update/delete permissions.