feat: Make all tasks skippable using variables

[fstarkenberg]

I wanted to skip the apparmor tasks on some specific hosts but could't find a way to do that without running Ansible with --skip-tags apparmor. I noticed that many tasks already have a way to exclude them with manage_xyz: false, but not all.

So this is my attempt to add it to all tasks. All tasks now have a variable with prefix manage_ that is true by default. Exception to this are tasks that just out right disable something, such as disable_prelink or disable_apport.

Since all tasks are still true this should not change anything for end-users. The only real change is that I renamed suid_sgid_permissions to manage_suid_sgid_permissions to be more consistent. I'm a bit unsure if I should change automatic_updates.enabled to be consistent with this as well, I left it as is for now.

Also
This creates a lot of one-line files in defaults/main just to enable tasks, another way to do this would be to do something like:

when:
  manage_kernel | default(true)

I'm personally fine with either way, the way I did it now is a bit more welcoming to moving hardcoded lines in tasks to default vars.

[konstruktoid]

ansible-lint comment: https://github.com/konstruktoid/ansible-role-hardening/actions/runs/11936635312/job/33274170950?pr=783#step:7:1

[konstruktoid]

https://github.com/konstruktoid/ansible-role-hardening/actions/runs/11936635312/job/33274170950?pr=783#step:7:1

[fstarkenberg]

I was a bit fast with the copy/paste. Think I fixed it now...

[konstruktoid]

Thanks!
I'll autogen the docs later.