Port Modules/Security/secharden-wazuh.sh. Installs the Wazuh agent from the official apt repository with the configured manager address. The agent package is held to prevent uncontrolled upgrades. Skipped entirely on the Wazuh server host (tsys-nsm) via the wazuh_server inventory group. 🤖 Generated with [Crush](https://github.com/charmassociates/crush) Assisted-by: GLM-5 via Crush <crush@charm.land>