Fixes #36759 - only call allowed transpilers

CVE-2022-3874: OS command injection via ct_command and fcct_command

Instead of allowing to call any command by changing a setting, only
allow specific paths to ct/fcct. If the user needs a different path,
they can set it via settings.yaml.

Fixes #36239 - Template load_resource - explain :joins, :preload and includes

Fixes #36426 - Introduce human-readable host statuses

Fixes #36153 - host_puppet_environment ignores host param

If host responds to :environment, it always returns
value of the :environment, ignoring the :puppet_environment
host parameter.

Correct behavior is to check if :environment is set,
and if not, then return the value of host parameter....

Refs #35530 - Dont use shellescape on the filename

Fixes #35694 - Add foreman product version macro

Fixes #35536 - Template input_resource macro & preview error (#9428)

Refs #35530 - Alternative approach to save_to_file

save_to_macro generates a command using cat and a heredoc string.
However, if the content to be written contains a heredoc using the same
delimiter, save_to_macro's heredoc will be terminated by it, leading to...

Fixes #35530 - Make save_to_file macro safer (#9426)

• Fixes #35530 - Make save_to_file macro safer

save_to_file does

cat <<EOF >$file
$content
EOF

but if `$content` contains a heredoc terminated with `EOF`, it
terminates the heredoc that save_to_file creates....

Fixes #35300 - Pass keyword arguments correctly (#9332)

In Ruby 3.0 keyword arguments are handled separate from positional
arguments¹. This uses kwargs and passes it along.

[1]: https://www.ruby-lang.org/en/news/2019/12/12/separation-of-positional-and-keyword-arguments-in-ruby-3-0/