new files from source

Infrastrucutre as Code/Ansible/roles/cis_hardening/kernel_hardening/defaults/main.yml

@@ -0,0 +1,7 @@
+---
+# Kernel defaults (override per host if needed)
+modprobe_blacklist_file: /etc/modprobe.d/cis_blacklist.conf
+
+# Additional kernel modules to disable
+blacklist_modules:
+  - tipc