Fixes #37065 - report_row now explicitly accepts kwargs
also adds a test which fails without the fix

Fixes #37184 - Report template generates incorrect kernel version

Fixes #36759 - only call allowed transpilers

CVE-2022-3874: OS command injection via ct_command and fcct_command

Instead of allowing to call any command by changing a setting, only
allow specific paths to ct/fcct. If the user needs a different path,
they can set it via settings.yaml.

Fixes #36639 - Use Templates feature on IPv6

This now looks at, and prefers, the IPv6 subnet on the
provision_interface to determine the template proxy. This allows using
the Templates feature in pure IPv6 provisioning setups.

Refs #35530 - Dont use shellescape on the filename

Refs #35530 - Alternative approach to save_to_file

save_to_macro generates a command using cat and a heredoc string.
However, if the content to be written contains a heredoc using the same
delimiter, save_to_macro's heredoc will be terminated by it, leading to...

Fixes #35306 - host_puppet_* template macros ignores host_param (#9334)

When host.puppet_server or host.puppet_ca_server returns
empty string we don't load the values from host parameters.

Fixes #32881 - Expose previous application record revision through safemode (#9258)

Fixes #31027 - transpiler macros for CoreOS family

Fixes #34213 - truthy? and falsy? template helpers

Template helpers for checking if a value is truthy or falsy