fix(shield): set seLinuxOptions to control_t for unprivileged host shield bottlerocket deployment

[therealbobo]

What this PR does / why we need it:

This PR adds conditional SELinux configuration support for Bottlerocket clusters to enable response actions in unprivileged host shield deployments.

Checklist

• [ ] Title of the PR starts with type and scope, (e.g. feat(agent,node-analyzer,sysdig-deploy):)
• [ ] Chart Version bumped for the respective charts
• [ ] Variables are documented in the README.md (or README.tpl in some charts)
• [ ] Check GithubAction checks (like lint) to avoid merge-check stoppers
• [ ] All test files are added in the tests folder of their respective chart and have a "_test" suffix