host-ctr: build masked paths list dynamically

[jpculp]

Description of changes:

Replaces the hardcoded masked paths list (introduced in #2573) with a generated one.

Testing done:

Built and launched an aarch64 k8s variant on a c6g.large and ran lscpu from the control container.

Architecture:           aarch64
  CPU op-mode(s):       32-bit, 64-bit
  Byte Order:           Little Endian
CPU(s):                 2
  On-line CPU(s) list:  0,1
Vendor ID:              ARM
  Model name:           Neoverse-N1
    Model:              1
    Thread(s) per core: 1
    Core(s) per socket: 2
    Socket(s):          1
    Stepping:           r3p1
    BogoMIPS:           243.75
    Flags:              fp asimd evtstrm aes pmull sha1 sha2 crc32 atomics fphp asimdhp cpuid asimdrdm lrcpc dcpop asimddp ssbs

/.bottlerocket/rootfs/run/host-containerd/runc/default/control/state.json:

    "mask_paths": [
      "/proc/acpi",
      "/proc/asound",
      "/proc/kcore",
      "/proc/keys",
      "/proc/latency_stats",
      "/proc/timer_list",
      "/proc/timer_stats",
      "/proc/sched_debug",
      "/proc/scsi"
    ],

/.bottlerocket/rootfs/run/host-containerd/runc/default/admin/state.json:

    "mask_paths": null,

Terms of contribution:

By submitting this pull request, I agree that this contribution is dual-licensed under the terms of both the Apache License, version 2.0, and the MIT license.

[jpculp]

Just tweaking some wording for clarity.

[arnaldo2792]

🎉 nice!

[jpculp]

• Replaced direct dependency on k8s.io/utils/strings/slices with a similar function.
• Replaced withMaskedPaths to withUnmaskedPaths, which now takes a slice of paths.
• Added in-code comment as to why we want to unmask /sys/firmware.

[jpmcb]

😷 👍🏼