Update secure_path for gitlab

templates/sudoers.j2

 Defaults        env_reset
 Defaults        mail_badpass
-Defaults        secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
+Defaults        secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin{% if inventory_hostname in groups.gitlab %}:/opt/gitlab/embedded/bin{% endif %}"
 
 root    ALL=(ALL:ALL) ALL