Invert the --omitsudo flag

[adhilto]

💡 Summary

Either:

• Completely remove the built-in functionality to run the OPA executable with sudo
• Change the --omitsudo flag into a --runwithsudo flag so that it defaults to running it without sudo

Motivation and context

Currently, ScubaGoggles by default runs the OPA executable as sudo on Linux and Mac. Previous tests indicated that running it as sudo was necessary, but latest tests indicate that it can be run without sudo. Running it with sudo by default introduces security risks that we should avoid if possible.

Implementation notes

If we do keep the built-in functionality to run OPA with sudo, we might consider adding a last-second hash check to minimize the security risk.

Acceptance criteria

• OPA is no longer run with sudo by default