Add pod-security-admission-config-file capability

[jcox10]

With Kubernetes 1.25, it is required to exempt rancher namespaces from the Pod Security Admission configuration. The rke2_common role should provide the ability to copy the override config file, and also update the rke2_config variable with the correct kubeapi server argument.

[aleiner]

@jcox10 - This is very helpful, thank you for the issue and PR. We refactored the code a bit to allow for a file removal which we want to add to all of the config files we drop. I'm going to open a new PR, #221 , and close your other one.

Thanks again. We're hoping to get caught back up on all of this real soon.