I've tried my best to locate all uses of hardcoded usernames, but its not guaranteed that all have been found/fixed.
- Remove sudo from recurring-donations path because it's not used by the service - Use doas instead of sudo in secure-node.nix