feat: add pwfeedback to sudoers for improved password user experience

config/ansible/tasks/global/global.yml

@@ -65,3 +65,13 @@
     state: touch
     mode: "0644"
   when: not hushlogin_stat.stat.exists
+
+# Ensure pwfeedback is enabled in sudoers for better password UX
+- name: Ensure pwfeedback is present in Defaults env_reset line in /etc/sudoers
+  ansible.builtin.replace:
+    path: /etc/sudoers
+    regexp: '^Defaults\s+env_reset(?!.*pwfeedback)'
+    replace: 'Defaults        env_reset,pwfeedback'
+    validate: 'visudo -cf %s'
+  become: true
+  tags: sudoers