Patch ubuntu filesystem pattern match

ubuntu openscap compliance's datastreams do full filesystem scans (..multiple times 🤔) accidentally. We'll patch it for now and/or ever.

also ubuntu has none severity findings, which vat doesn't support so we'll use low.

refs:

• https://github.com/ComplianceAsCode/content/pull/2605
• https://github.com/ComplianceAsCode/content/pull/11973

tests:

• trigger: https://code-ib-mario.staging.dso.mil/ironbank-tools/tools/trigger/-/pipelines/64948 ubuntu-oscap-trigger.csv
• ubuntu base image:
  • before 2m18s (ubi runner)
  • after 41s (ubi runner)
  • after 31s (alpine runner)

fixes:

• https://repo1.dso.mil/dsop/taqtile/manifest/manifest-api-production/-/commits/taqtile-dev-ubuntu