iac updates

Summary

• restructure prereqs and be more explicit about common storageclass/istio/elasticsearch prereqs
• update rke2 to deploy airgapped by default, use stig'd rhel8 os, and point to iac on repo1