Fix CVE 2023 41914

[sjpb]

• Provides a new role 'cve-2023-41914' and playbook ansible/adhoc/cve-2023-41914.yml to mitigate Slurm CVE-2023-41914. IMPORTANT: See ansible/roles/cve-2023-41914/README.md for full details.
• Builds new fat image openhpc-231020-1357-b5d8b056 incorporating above fix.

Note CI tests the new fatimage works properly, but doesn't test the fix of a live system.

Tested on a live system as follows:

• Put up cluster at commit 089d85c, ran hpctests (so slurmdbd had some data), ran adhoc/cve-2023-41914.yml, ran hpctests again
• Checked:
  • All 8x jobs (4x before cve playbook, 4x after) visible in slurm jobs dashboard
  • OOD portal page works
  • OOD shell works
  • Remote desktop works
  • Jupyter works

[sjpb]

Building image openhpc-231020-0951-c147d9ca in https://github.com/stackhpc/ansible-slurm-appliance/actions/runs/6586148645/job/17893915770

[sjpb]

Built image openhpc-231020-1032-c89fa839 in https://github.com/stackhpc/ansible-slurm-appliance/actions/runs/6586572875/job/17895144942

[sjpb]

CI failed on SMSlabs because rebuilds are broken.

[sjpb]

Image build openhpc-231020-1357-b5d8b056 (on arcus): https://github.com/stackhpc/ansible-slurm-appliance/actions/runs/6588674103/job/17901488163

[sjpb]

Repeated test of creating cluster with pre-PR image, running site.yml, hpctests.yml, the cve adhoc, then hpctests.yml again. Could see all 8x jobs in sacct.