feat: kmod_tracker has allow/deny list

[lockbox]

this addresses #647 adding an allow / deny list. i added a denylist to allow for things like temporary masking etc of configs. not the most useful thing but its simple enough + has actually come in handy. feel free to tell me to nix it though.

i also added a "quiet" option which doesnt log to the console since some targets load hundreds of modules and it can get annoying trying to read output when driving manually

Closes #647

[Copilot]

Pull Request Overview

This PR enhances the kernel module tracker plugin with configurable allow/deny lists and optional quiet logging. The plugin now supports fine-grained control over which kernel modules can load, addressing the need for more flexible module filtering beyond the default block-all behavior.

• Added allowlist/denylist configuration options for granular control over module loading
• Implemented quiet mode to reduce logging verbosity for targets with many modules
• Expanded comprehensive documentation with usage examples and configuration options

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[lacraig2]

I appreciate the PR! This looks good.

On the technical points:

• Couple of good copilot thoughts above
• This has a potential flaw in init_module where we can't actually determine the path for the ko. It's technically still an issue for our igloo.ko issue, but we'd appreciate thoughts.

[lacraig2]

Also! This is our first external contribution. Which is very exciting.

It also means that permissions have changed for our CI jobs so everything breaks for reasons that are not your fault.

I am going to use this PR as a test to fix our actions. I will merge them separately ahead of your PR once they work.

[lockbox]

Cool 😎 thats exciting

[lockbox]

After the ci stuff is working lmk and ill rebase to address the comments. Off the cuff all my ideas are extremely hacky to handle init_module but I feel like this is solvable

[lacraig2]

@lockbox should be set on the CI issues. Thanks!

[lacraig2]

FYSA: rebased this on main and ran tests

[lockbox]

Save for the init_module comments this should be gtg, did you want to solve that here or "eventually?"

[lacraig2]

I can live with eventually on that.

Merged. Thanks!