[COOK-760] selinux state based on attribute

http://tickets.opscode.com/browse/COOK-760

* Add policy state attribute, enforcing default (matches the RHEL
  default policy)
* Add selinux_state LWRP
* Convert recipes to use LWRP
* Update README, metadata

Based on idea from #2