feat(cis): add selectable profile and per-rule hardening toggles

roles/cis/tasks/warning_banners.yml

@@ -0,0 +1,11 @@
+---
+- name: Set login warning banners
+  when: cis_effective_rules.warning_banners | default(false)
+  ansible.builtin.copy:
+    dest: "/mnt/etc/{{ item }}"
+    content: "{{ cis_cfg.banner_text }}\n"
+    mode: "0644"
+  loop:
+    - issue
+    - issue.net
+    - motd