Add `immutable` options in the sudo-defaults crate

[squell]

I.e. some settings we do want to support, but may want to error on if a user tries to change them (candidates would be to disallow changing env_reset, probably use_pty too)