Adding sec posture query, expand dex queries to testing & qa team (#46021)

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **New Features**
* Added macOS security posture monitoring report that automatically
tracks and logs FileVault encryption status, application firewall
configuration, Gatekeeper assessments, and System Integrity Protection
settings across systems.

<!-- review_stack_entry_start -->

[![Review Change
Stack](https://storage.googleapis.com/coderabbit_public_assets/review-stack-in-coderabbit-ui.svg)](https://app.coderabbit.ai/change-stack/fleetdm/fleet/pull/46021?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack)

<!-- review_stack_entry_end -->

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

it-and-security/fleets/testing-and-qa.yml

@@ -85,6 +85,7 @@ policies:
   # Linux policies
   - path: ../lib/linux/policies/check-fleet-desktop-extension-enabled.yml
 reports:
+  - path: ../lib/all/reports/dex-queries.yml
 software:
   packages:
     # Linux apps

it-and-security/lib/all/reports/dex-queries.yml

@@ -457,3 +457,15 @@
   automations_enabled: true
   logging: snapshot
   interval: 14400
+- name: DEX - System experience - security posture
+  description: Verifying the following components are enabled on the host - filevault, sip, gatekeeper, firewall
+  query: |
+    SELECT
+      (SELECT 1 FROM filevault_status WHERE status LIKE '%on%')   AS filevault,
+      (SELECT 1 FROM alf WHERE global_state >= 1)                 AS firewall,
+      (SELECT 1 FROM gatekeeper WHERE assessments_enabled = 1)    AS gatekeeper,
+      (SELECT 1 FROM sip_config WHERE config_flag = 'sip')        AS sip;
+  platform: darwin
+  automations_enabled: true
+  logging: snapshot
+  interval: 3600