add FIPS report to the API

[bcressey]

Issue number:
Related: #1667

Description of changes:
Add a FIPS report to the API so that apiclient report fips can indicate whether FIPS mode is enabled.

The existing framework has fixed strings in the output like "benchmark" and "level" that are CIS-specific, along with the numbered steps. It's not perfect but it also didn't offend my aesthetic sensibilities enough to create a parallel set of FIPS-specific types to be used in either the text or JSON output.

Testing done:
Ran the report on an EC2 instance.

$ apiclient report fips
Benchmark name:  FIPS Security Policy
Version:         v1.0.0
Reference:       https://csrc.nist.gov/
Benchmark level: 1
Start time:      2024-04-12T18:45:04.108220818Z

[PASS] 1.0       FIPS mode is enabled. (Automatic)
[PASS] 1.1       FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2       FIPS self-tests passed. (Automatic)

Passed:          3
Failed:          0
Skipped:         0
Total checks:    3

The JSON formatted report also works.

$ apiclient report fips -f json|jq .
{
  "level": 1,
  "total": 3,
  "passed": 3,
  "skipped": 0,
  "failed": 0,
  "status": "PASS",
  "timestamp": "2024-04-12T18:44:23.836730040Z",
  "name": "FIPS Security Policy",
  "version": "v1.0.0",
  "url": "https://csrc.nist.gov/",
  "results": {
    "fips01000000": {
      "name": "fips01000000",
      "id": "1.0",
      "level": 0,
      "title": "FIPS mode is enabled.",
      "mode": "Automatic",
      "status": "PASS",
      "error": ""
    },
    "fips01010000": {
      "name": "fips01010000",
      "id": "1.1",
      "level": 0,
      "title": "FIPS module is Amazon Linux 2023 Kernel Cryptographic API.",
      "mode": "Automatic",
      "status": "PASS",
      "error": ""
    },
    "fips01020000": {
      "name": "fips01020000",
      "id": "1.2",
      "level": 0,
      "title": "FIPS self-tests passed.",
      "mode": "Automatic",
      "status": "PASS",
      "error": ""
    }
  }
}

Terms of contribution:

By submitting this pull request, I agree that this contribution is dual-licensed under the terms of both the Apache License, version 2.0, and the MIT license.

[bcressey]

⬆️ force push fixes formatting

[bcressey]

⬆️ force push for rebase