Add new linting rule for preventing `SecRule` directives to remove targets from REQUEST_COOKIES

Based on https://github.com/coreruleset/coreruleset/pull/4378, we are moving cookie exclusions from `SecRule`s to a post CRS file with `SecRuleUpdateTargetById` directives instead.

## requirements

- check that `SecRule` directives don't have the old behavior: `!REQUEST_COOKIES` should not be allowed as target