new files from source

Infrastrucutre as Code/Ansible/roles/cis_hardening/defaults/main.yml

@@ -0,0 +1,6 @@
+---
+# Parent-level defaults
+cis_tag: cis_hardening
+audit_rules_file: /etc/audit/rules.d/cis.rules
+rsyslog_remote: "" # set to "logserver.example.com:514" to forward logs
+txt_grub_args: "" # additional kernel args if needed, e.g. "audit=1"