cleanup puppet code to remove references to previous Debian releases (bookworm/12 and earlier)

we have dozens of constructions like this:

  if versioncmp($facts['os']['release']['major'], '12') <= 0 {
    ensure_resource('kmod::load', 'drbg', { ensure => $ensure })
  }

according to rg release.*major, there are 33 matches like this.

because we have everything updated to trixie, we can probably just remove all of those.

in https://gitlab.torproject.org/tpo/tpa/puppet-control/-/merge_requests/200, i also suggested that we could have verion-specific overrides in Hiera to make it easier to cleanup those in the future.