Disable bypass for conditional access (#41211)

## Summary

- Adds `conditional_access.bypass_disabled: true` to
`it-and-security/default.yml` to disable the bypass option for
conditional access in Fleet's GitOps configuration
- This prevents end users from bypassing conditional access blocking
during login attempts

Built for [Allen
Houchins](https://fleetdm.slack.com/archives/D0AFASNBZMW/p1772933047288969)
by [Kilo for Slack](https://kilo.ai/features/slack-integration)

Co-authored-by: kiloconnect[bot] <240665456+kiloconnect[bot]@users.noreply.github.com>

it-and-security/default.yml

@@ -1,6 +1,8 @@
 agent_options:
   path: ./lib/all/agent-options/agent-options.yml
 org_settings:
+  conditional_access:
+    bypass_disabled: true
   features:
     enable_host_users: true
     enable_software_inventory: true