Enhance E2E Hardened option

[dereknola]

Proposed Changes

• Remove unnecessary config.yaml options
• Add required tls-cipher-suites argument to config.yaml
• Rework default of E2E_HARDENED to accept true (psa)
• Auto install kube-bench for easier CIS validation

Types of Changes

Testing Enhancements

Verification

Manually run multiple times when overhauling the K3s CIS profiles

Testing

N/A this is just for manual QA

Linked Issues

N/A

User-Facing Change

Further Comments

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 43.49%. Comparing base (58ab259) to head (77c0364).
Report is 8 commits behind head on master.

❗ There is a different number of reports uploaded between BASE (58ab259) and HEAD (77c0364). Click for more details.

HEAD has 1 upload less than BASE

Flag	BASE (58ab259)	HEAD (77c0364)
e2etests	7	6

Additional details and impacted files

@@            Coverage Diff             @@
##           master   #10558      +/-   ##
==========================================
- Coverage   49.47%   43.49%   -5.98%     
==========================================
  Files         179      179              
  Lines       14924    14936      +12     
==========================================
- Hits         7384     6497     -887     
- Misses       6161     7241    +1080     
+ Partials     1379     1198     -181     

Flag	Coverage Δ
e2etests	36.31% <ø> (-10.02%)	⬇️
inttests	36.68% <ø> (+16.96%)	⬆️
unittests	13.35% <ø> (-0.02%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.