Add tier preference to security index settings allowlist and update default tier preference

[gwbrown]

This commit allows tier preference for the security system indices to be set using the Security Settings API, and adds validation to prevent using the data_frozen tier for security system indices.

Also updates the default tier preference to data_hot,data_content.