Guard OVAL def-group for debian/ubuntu/sle products only

Wrap <def-group> inside the existing {{% if %}} block in
pwhistory_remember and pwquality_enabled shared.xml files so that
products without /etc/pam.d/common-password (e.g. RHEL8/UBI8) produce
empty OVAL output instead of a Jinja2 undefined-variable error.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: israel-villar

linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_password_pam_pwhistory_remember/oval/shared.xml

@@ -1,6 +1,5 @@
 {{% if "debian" in product or "ubuntu" in product %}}
 {{%- set accounts_password_pam_file = '/etc/pam.d/common-password' -%}}
-{{% endif %}}
 
 <def-group>
   <definition class="compliance" id="{{{ rule_id }}}" version="2">
@@ -56,3 +55,4 @@
   </ind:textfilecontent54_object>
 
 </def-group>
+{{% endif %}}

linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_pwquality_enabled/oval/shared.xml

@@ -1,6 +1,6 @@
 {{% if 'debian' in product or 'ubuntu' in product or product in ['sle15', 'sle16'] %}}
 {{% set configuration_files = ["common-password"] %}}
-{{% endif %}}
+
 <def-group>
   <definition class="compliance" id="{{{ rule_id }}}" version="2">
     {{{ oval_metadata("Check pam_pwquality module is enabled", rule_title=rule_title) }}}
@@ -35,3 +35,4 @@
                                test_ref="password_pam_pwquality_enabled_" ~ (file | escape_id)) }}}
   {{% endfor %}}
 </def-group>
+{{% endif %}}