Add k3s-cis-1.12 profile

[dereknola]

Almost an exact copy of the k3s-cis-1.11.

• We actually never had the duplicates that upstream cis-1.11 had (oops... we didn't include bad code ¯_(ツ)_/¯ )
• We already had removed the old TLS_RSA ciphers as we also knew they were insecure

results on a v1.34.4+k3s1 cluster with standard hardening guide applied.

== Summary total ==
82 checks PASS
0 checks FAIL
35 checks WARN
14 checks INFO