Make the internal whitelist toggleable

[luytan]

Must be done after #209

Expose the internal whitelist to the user by adding a table in cardwire.toml:

[internal_whitelist]
pacman = true
apt = true
vfio = false
systemd = true

Each keys would be linked to a "comm" bundle, eg with vfio:

• "nodev-device-ev"
• "virtnodedevd"
• "daemon-init"

This would allow adding more whitelisted programs, with some being opt-out (package managers) and some being opt-in (virtio)