refactor(provisioning): make scripts self-locating and read configs locally

All provisioning scripts and modules now resolve their own location via
BASH_SOURCE and derive PROJECT_ROOT_PATH from it, removing a hard
dependency on the current working directory.

- Derive PROJECT_ROOT_PATH/CONFIGFILES_PATH/MODULES_PATH/SCRIPTS_PATH
  from BASH_SOURCE in SetupNewSystem.sh and every module
- Replace all curl ${DL_ROOT}/... downloads with cat of the matching
  local files under ProjectCode/ConfigFiles (the dl.knownelement.com CDN
  is no longer required for a git clone)
- Invoke modules by absolute path instead of cd ./Modules/X && bash ./x
- Fix secharden-audit-agents.sh: wrong path depth (../../ vs ../../..),
  wrong Project-Includes glob, and ConfigFiles/AudidD -> AuditD typo,
  all of which previously crashed the script
- Remove duplicate FrameworkVars source lines

Run from anywhere with: sudo bash ProjectCode/SetupNewSystem.sh

🤖 Generated with [Crush](https://github.com/charmassociates/crush)

Assisted-by: GLM-5 via Crush <crush@charm.land>

ProjectCode/Modules/Security/secharden-ssh.sh

@@ -4,11 +4,10 @@
 #Core framework functions...
 #########################################
 
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+
 export PROJECT_ROOT_PATH
-PROJECT_ROOT_PATH="$(realpath ../../../)"
-
-#Framework variables are read from here
-
+PROJECT_ROOT_PATH="$(cd "$SCRIPT_DIR/../../.." && pwd)"
 
 export GIT_VENDOR_PATH_ROOT
 GIT_VENDOR_PATH_ROOT="$PROJECT_ROOT_PATH/vendor/git@git.knownelement.com/29418/"
@@ -16,19 +15,19 @@ GIT_VENDOR_PATH_ROOT="$PROJECT_ROOT_PATH/vendor/git@git.knownelement.com/29418/"
 export KNELShellFrameworkRoot
 KNELShellFrameworkRoot="$GIT_VENDOR_PATH_ROOT/KNEL/KNELShellFramework"
 
-source $KNELShellFrameworkRoot/Framework-ConfigFiles/FrameworkVars
+export CONFIGFILES_PATH
+CONFIGFILES_PATH="$PROJECT_ROOT_PATH/ProjectCode/ConfigFiles"
 
-for framework_include_file in $KNELShellFrameworkRoot/Framework-Includes/*; do
+source "$KNELShellFrameworkRoot/Framework-ConfigFiles/FrameworkVars"
+
+for framework_include_file in "$KNELShellFrameworkRoot"/Framework-Includes/*; do
     source "$framework_include_file"
 done
 
-for project_include_file in ../../../Project-Includes/*; do
+for project_include_file in "$PROJECT_ROOT_PATH"/Project-Includes/*; do
     source "$project_include_file"
 done
 
-#Framework variables are read from hee
-source $KNELShellFrameworkRoot/Framework-ConfigFiles/FrameworkVars
-
 
 #########################################
 # Core script code begins here
@@ -54,7 +53,7 @@ if [ ! -d $ROOT_SSH_DIR ]; then
     mkdir /root/.ssh/
 fi
 
-cat ../../ConfigFiles/SSH/AuthorizedKeys/root-ssh-authorized-keys >/root/.ssh/authorized_keys
+cat "$CONFIGFILES_PATH/SSH/AuthorizedKeys/root-ssh-authorized-keys" >/root/.ssh/authorized_keys
 chmod 400 /root/.ssh/authorized_keys
 chown root: /root/.ssh/authorized_keys
 
@@ -63,7 +62,7 @@ if [ "$LOCALUSER_CHECK" -gt 0 ]; then
         mkdir -p /home/localuser/.ssh/
     fi
     
-    cat ../../ConfigFiles/SSH/AuthorizedKeys/localuser-ssh-authorized-keys >/home/localuser/.ssh/authorized_keys
+    cat "$CONFIGFILES_PATH/SSH/AuthorizedKeys/localuser-ssh-authorized-keys" >/home/localuser/.ssh/authorized_keys
     chown localuser /home/localuser/.ssh/authorized_keys &&
     chmod 400 /home/localuser/.ssh/authorized_keys
 fi
@@ -74,7 +73,7 @@ if [ "$SUBODEV_CHECK" = 1 ]; then
         mkdir /home/subodev/.ssh/
     fi
     
-    cat ../../ConfigFiles/SSH/AuthorizedKeys/localuser-ssh-authorized-keys >/home/subodev/.ssh/authorized_keys
+    cat "$CONFIGFILES_PATH/SSH/AuthorizedKeys/localuser-ssh-authorized-keys" >/home/subodev/.ssh/authorized_keys
     chmod 400 /home/subodev/.ssh/authorized_keys &&
     chown subodev: /home/subodev/.ssh/authorized_keys
 fi
@@ -84,7 +83,7 @@ DEV_WORKSTATION_CHECK="$(hostname | egrep -c 'subopi-dev|CharlesDevServer' || tr
 
 if [ "$DEV_WORKSTATION_CHECK" -eq 0 ]; then
     
-    cat ../../ConfigFiles/SSH/Configs/tsys-sshd-config >/etc/ssh/sshd_config
+    cat "$CONFIGFILES_PATH/SSH/Configs/tsys-sshd-config" >/etc/ssh/sshd_config
 fi
 
 
@@ -94,7 +93,7 @@ export UBUNTU_CHECK
 UBUNTU_CHECK="$(distro | grep -c Ubuntu||true)"
 
 if [ "$UBUNTU_CHECK" -ne 1 ]; then
-    cat ../../ConfigFiles/SSH/Configs/ssh-audit-hardening.conf >/etc/ssh/sshd_config.d/ssh-audit_hardening.conf
+    cat "$CONFIGFILES_PATH/SSH/Configs/ssh-audit-hardening.conf" >/etc/ssh/sshd_config.d/ssh-audit_hardening.conf
     chmod og-rwx /etc/ssh/sshd_config.d/*
 fi