Install Lynis in Debian host bootstrap

bootstrap/host/README.md

@@ -30,6 +30,7 @@ The playbook:
   the current Debian release
 - installs user-level pipx CLI tools such as `yt-dlp`, plus runtime helpers
   such as `ffmpeg` and `nodejs`
+- installs Lynis for report-only host audits through `./jeannie security-host`
 - installs `age` and `sops` for encrypted repo-managed secrets
 - installs and configures Ollama for homelab-local AI helpers when
   `debian_pc_install_ollama` is true

bootstrap/host/group_vars/debian_pc.yml

@@ -57,6 +57,7 @@ debian_pc_base_packages:
   - git
   - gnupg
   - gpg
+  - lynis
   - nodejs
   - python3
   - python3-apt