openSUSE admin

Our zypper-metrics.{timer,service} collects pending updates and reboots already.
It'd be great to extend the script to also collect:

• number of orphaned packages
• number of .rpmnew files in /etc
• number of .rpmsave files in /etc

The zypper pa --orphaned unfortunately query requires root, hence a sudo rule for the monitor user would be needed. The other two can be a find call either as root (also using a sudo rule) or with cap_dac_read_search (probably less secure as it'd expose the whole file system) to also cover files in directories which aren't world readable.