Add iptables package to Base (or Kvm ?) image

[kkaempf]

Citing from #1745

I think the iptables package should be moved from the baremetal image to the base image, since it seems to be required in rke2-clusters with calico and cilium as well.