[CSPM] implement runInSystemProbe to allow the CSPM code to run in system-probe

[paulcacheux]

What does this PR do?

This PR adds a new config flag for the CSPM feature allowing it to run in system-probe instead of the security-agent. Everything else is the same, and this PR can be reduced as simply applying all the feature work to a variable container (mounts, env vars, annotations etc) instead of always the security agent.

The way this is done is similar to:

• the directSendFromSystemProbe config of the CWS feature
• the runInCoreAgent feature of the process code

Motivation

We are in the process of deprecating the security agent, the CWS code is going to run fully in the system probe and the CSPM code is going to migrate to the system-probe. This PR is part of the last point.

Additional Notes

Anything else we should know when reviewing?

Minimum Agent Versions

This new feature will require at least agent version 7.75 (this might be revised to some higher value if we find some critical issues with this feature).

Describe your test plan

This was tested manually on some local kind clusters, and on staging on stingchameleon.

Checklist

• PR has at least one valid label: bug, enhancement, refactoring, documentation, tooling, and/or dependencies
• PR has a milestone or the qa/skip-qa label
• All commits are signed (see: signing commits)

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 38.40%. Comparing base (cab4ef9) to head (0950bc4).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2480      +/-   ##
==========================================
+ Coverage   38.38%   38.40%   +0.02%     
==========================================
  Files         300      300              
  Lines       25555    25564       +9     
==========================================
+ Hits         9809     9818       +9     
  Misses      15002    15002              
  Partials      744      744              

Flag	Coverage Δ
unittests	38.40% <100.00%> (+0.02%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines	Coverage Δ
...al/controller/datadogagent/feature/cspm/feature.go	75.80% <100.00%> (+1.23%)	⬆️

---

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update cab4ef9...0950bc4. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.