Improve security-scan's e2e (MicroVM) to test each distribution's scan results

[andypitcher]

Linked issue: #227

rancher/security-scan already implements an e2e which currently creates a k8s cluster to confirm the execution of a scan (not its outcome). We want to improve this test, so that for each distribution the smoke test will test whether a given cis profile delivers the expected results.

For example, rke-cis-1.8-permissive profile will be tested as below:

1. RKE v1.26 would be created with microVM
2. MicroVM is configured with all environment requirements
3. Run security-scan with rke-cis-1.8-permissive
4. Scan should have 0 check fails (permissive and hardened)

Note: We should the define the expected results per distro's setup.