refactor(systemModule:security): split into modules and add kernel hardening

system/modules/security/pam/default.nix

@@ -0,0 +1,23 @@
+{
+  security = {
+    pam = {
+      loginLimits = [
+        {
+          domain = "@wheel";
+          item = "nofile";
+          type = "soft";
+          value = "524288";
+        }
+        {
+          domain = "@wheel";
+          item = "nofile";
+          type = "hard";
+          value = "1048576";
+        }
+      ];
+      services = {
+        hyprlock = {};
+      };
+    };
+  };
+}