setup.sh: fix /etc/sudoers.d permissions
gitlab runs ci jobs with umask 0000 to prevent issues with file permissions. sudo refuses to look at configuration files in /etc/sudoers.d if it is world-writable.
Fix these permissions so that sudo still works.