[COOK-760] - selinux state based on attribute

* Add policy state attribute, enforcing default (matches the RHEL
  default policy)
* Add selinux_state LWRP
* Convert recipes to use LWRP
* Update README, metadata