Enable Rancher ACE by configuring authentication-token-webhook-config-file

[ron1]

Support Rancher ACE enablement as described here by optionally configuring property

kube-apiserver-arg:
  - authentication-token-webhook-config-file=/var/lib/rancher/rke2/kube-api-authn-webhook.yaml

This feature should be implemented as a task much like https://github.com/rancherfederal/rke2-ansible/blob/main/roles/rke2_common/tasks/add-audit-policy-config.yml.