[rke2] - enable cis-profile, add configuration for CIS hardening

[AshleyDumaine]

What type of PR is this?

/kind feature

What this PR does / why we need it: Enables the CIS profile for the RKE2 flavor and adds some extra configuration for CIS hardening. Unfortunately we can't use "cis" for RKE2 1.29 due to a CRD validation issue where that is not present in the enum. I've opened a PR upstream for that in the meantime.

With an RKE2 cluster provisioned by CAPL with these changes, I ran a scan on it after installing the rancher-cis-benchmark helm chart:

    lastRunScanProfileName: rke2-cis-1.8-profile-hardened
    lastRunTimestamp: "2024-04-23T15:36:42Z"
    observedGeneration: 1
    summary:
      fail: 0
      notApplicable: 11
      pass: 71
      skip: 0
      total: 130
      warn: 48

Which issue(s) this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged):
Fixes #

Special notes for your reviewer:

TODOs:

• squashed commits
• includes documentation
• adds unit tests
• adds or updates e2e tests

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 54.42%. Comparing base (d833668) to head (5eb3074).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #263   +/-   ##
=======================================
  Coverage   54.42%   54.42%           
=======================================
  Files          27       27           
  Lines        1560     1560           
=======================================
  Hits          849      849           
  Misses        663      663           
  Partials       48       48           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.