Extend the AppArmor CRD with a profile flag which should allow to switch the profile mode

[ccojocar]

What would you like to be added:

The AppArmor CRD should include a flag which defines the mode of the apparmor profile. This will allow to easily switch a profile from complain to audit or enforcement mode.

The list of supported profile flags is:

PROFILE FLAGS = 'complain' | 'audit' | 'enforce' | 'mediate_deleted' |
           'attach_disconnected' | 'chroot_relative'

source: https://manpages.ubuntu.com/manpages/bionic/en/man5/apparmor.d.5.html

Also some details are available in https://documentation.suse.com/sles/15-SP6/html/SLES-all/cha-apparmor-profiles.html#sec-apparmor-profiles-flags.

Why is this needed:

This is required in order to easily switch a profile from audit to enforcement or complain mode.

User story covered

[ccojocar]

cc @mhils