Make Ansible in account_password_selinux_faillock_dir idempotent

[jan-cerny]

Change the faillock directory SELinux context only if the context is incorrect.

Resolves: https://issues.redhat.com/browse/OPENSCAP-6239

Review Hints:

• ./build_product --playbook-per-rule rhel9
• manually replace hosts by hosts: all in build/rhel9/playbooks/stig/account_password_selinux_faillock_dir.yml
• ssh to your VM and run linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/account_password_selinux_faillock_dir/tests/wrong_value.fail.sh there
• run ansible-playbook -u root -i YOUR_IP, build/rhel9/playbooks/stig/account_password_selinux_faillock_dir.yml at least twice and compare the output of the first run with the second run and so on, verify that the second and next runs don't change anything and that the output contains only "ok" or "skipping"
• apart from that, run automatus Tss with --remediate-using ansible

[openshift-ci]

@jan-cerny: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/e2e-aws-openshift-node-compliance	1c7c479	link	true	/test e2e-aws-openshift-node-compliance

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[jan-cerny]

/packit build