Make Blueprint for service_disabled template to mask services

[evgenyz]

Description:

• It is now aligned with other remediations.

Rationale:

• We mask services in Bash and Ansible to take the service down and keep it down.
• IB handles it better.
• Fixes Switch from disabled to masked in the Blueprint remediation for service_disabled template #11587.

Review Hints:

• OpenSCAP: Support Blueprint services customization for masking OpenSCAP/openscap#2091
• IB: Enable masked systemd services in cloudapi (HMS-3661) osbuild/osbuild-composer#3972

[github-actions]

Start a new ephemeral environment with changes proposed in this pull request:

Fedora Environment

Oracle Linux 8 Environment

[github-actions]

🤖 A k8s content image for this PR is available at:
ghcr.io/complianceascode/k8scontent:11679
This image was built from commit: 4db3c97

Click here to see how to deploy it

If you alread have Compliance Operator deployed:
utils/build_ds_container.py -i ghcr.io/complianceascode/k8scontent:11679

Otherwise deploy the content and operator together by checking out ComplianceAsCode/compliance-operator and:
CONTENT_IMAGE=ghcr.io/complianceascode/k8scontent:11679 make deploy-local

[codeclimate]

Code Climate has analyzed commit 4db3c97 and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 59.8% (0.0% change).

View more on Code Climate.