bump security-scan image version

Feature: thanos support

Co-Authored-By: Spencer Gilbert <Spencer.Gilbert@gmail.com>

https://github.com/rancher/rancher/issues/24262

https://github.com/rancher/rancher/issues/23857

Bump coreos-kube-state-metrics version

To make monitoring work when hardening rules are applied.

Problem:
Fails to run nginx proxies, because user home directory is not owned by nginx user inside newer nginx-alpine images

Solution:
Mount emptyDir to the user home directory(/var/cache/nginx) so that it
is writable by the nginx user.
Also update UID from 100 to 101 to be consistent with upstream changes(https://github.com/nginxinc/docker-nginx/issues/218)

logging 0.1.2 -> 0.1.3
monitoring 0.0.4 -> 0.0.5

Copy the binary to the host before wins cli prc run

Add PSP and related role/rolebinding/SA resources to logging chart.
The PSP contains restricted rules + hostPath volume.
Also, remove unnecessary privileged escalation from log-aggregator.