Make Ansible in grub2_argument_absent template idempotent

[jan-cerny]

This commit will make Ansible remediations in the grub2_argument_absent template idempotent. The grubby command will be executed only if the GRUB2 argument is present in /etc/default/grub or is present in the /boot/loader/entries.

Resolves: https://issues.redhat.com/browse/OPENSCAP-6251

Review Hints:

• ./build_product --playbook-per-rule rhel9
• manually replace hosts by hosts: all in rhel9/playbooks/anssi_bp28_high/grub2_nosmap_argument_absent.yml`
• ssh to YOUR_IP and run there: grubby --update-kernel=ALL --args="nosmap"
• Back on the host, run ansible-playbook -u root -i YOUR_IP, rhel9/playbooks/anssi_bp28_high/grub2_nosmap_argument_absent.yml at least twice and compare the output of the first run with the second run and so on, verify that the second and next runs don't change anything and that the output contains only "ok" or "skipping"
• apart from that, run automatus Tss with --remediate-using ansible

[openshift-ci]

@jan-cerny: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/e2e-aws-openshift-node-compliance	9bc25e4	link	true	/test e2e-aws-openshift-node-compliance

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[Mab879]

While I would like to see the task name in the task name, that problem is for another day.