Add CrowdSec tooling check

[naimo84]

Pull Request Summary

This Pull Request introduces a new feature to perform a check for the presence and configuration of the CrowdSec intrusion prevention system (IPS) tool.

It should fix #1575

The key changes include:

Changes:

1. Binary Detection:

   • Added detection logic for the cscli binary in include/binaries.
   • Logs the presence of the CrowdSec tool if found.

2. Configuration Updates:

   • Introduced a new constant CROWDSECCLIBINARY in include/consts.

3. Tooling Tests:

   • Implemented a new test TOOL-5103 in include/tests_tooling to:
     • Check for the presence of CrowdSec.
     • Verify the existence of its configuration file (/etc/crowdsec/config.yaml).
     • Determine the running status of CrowdSec using the cscli metrics command.
     • Log and report the results in the audit output.

Files Modified:

• include/binaries: Added detection for cscli.
• include/consts: Defined a new constant for the CrowdSec binary.
• include/tests_tooling: Added the logic for detecting and reporting CrowdSec's presence and status.

These changes enhance the tool's capabilities by including CrowdSec in the list of known intrusion prevention tools, providing system administrators with better oversight of their security tooling.

[vk6xebec]

Awesome, thanks so much