Increase selinux coverage of the host system

[krnowak]

CI: http://jenkins.infra.kinvolk.io:8080/job/container/job/sdk/2052/cldsv/

• switch to selinux profiles
• add more sec-policy packages
• do some cleanups in profiles wrt selinux, audit, python, perl and caps USE flags

TODO:

• mask python files from sys-libs/libselinux for generic images
• drop systemd patch that removes selinux checks

[pothos]

Interesting! Maybe we can do the correct labeling now and have a booting image: https://github.com/flatcar/scripts/pull/1517

[github-actions[bot]]

Build action triggered: https://github.com/flatcar/scripts/actions/runs/17375141650

[pothos]

When ready we should also make kola enforce early and not at runtime: https://github.com/flatcar/mantle/pull/487