Add new check_kernel and check_yum recipes.

These split up and replace check_updates. check_updates seems to
erroneously report packages with unknown security statuses as being
security related.