feat: Add host-capabilities whitelist #6171

Job	Run time
Detect changes	8s
Helm unittest	11s
coverage-rust	28m 20s
Shellcheck	5s
Check if the generated code is up to date	9m 40s
Spelling check	5s
Check if the kwctl reference documentation is up to date	9m 11s
Go e2e tests	32m 35s
Calculate crates matrix	6s
Golangci-lint	29s
Go tests	4m 42s
Check kwctl (windows-latest)	5m 54s
Check kwctl (macos-latest)	3m 21s
Build kwctl / Detect kwctl changes	6s
Validate Hauler manifest	0s
Build kwctl / Build darwin binary (x86_64)	11m 55s
Build kwctl / Build darwin binary (aarch64)	11m 26s
Build kwctl / Build windows (x86_64) binary (x86_64, windows-latest)	18m 13s
Build kwctl / Build linux binaries (aarch64)	9m 59s
Build kwctl / Build linux binaries (x86_64)	9m 37s
E2E tests sigstore (kwctl)	8m 54s
E2E tests sigstore (policy-server)	9m 46s
E2E tests (kwctl)	12m 19s
E2E tests (burrego)	2m 3s
Rustfmt (policy-server)	24s
Integration tests (policy-evaluator)	18m 56s
Rustfmt (burrego)	23s
Clippy (kwctl)	2m 35s
Rustfmt (policy-evaluator)	23s
Unit tests (burrego)	1m 55s
Rustfmt (policy-fetcher)	23s
Clippy (policy-evaluator)	2m 29s
Clippy (policy-fetcher)	1m 28s
Unit tests (policy-server)	5m 5s
Rustfmt (kwctl)	23s
Integration tests (policy-server)	15m 47s
Unit tests (kwctl)	3m 33s
Unit tests (policy-evaluator)	3m 56s
Clippy (burrego)	1m 22s
Clippy (policy-server)	3m 22s
Unit tests (policy-fetcher)	2m 6s
CI Success	2s
	4h 13m 37s

Provide feedback