Netlink debug

[yeazelm]

Recut of PR to core kit: bottlerocket-os/bottlerocket-core-kit#289

Issue number:

Closes # bottlerocket-os/bottlerocket#4313

Description of changes:
CRIU requires NETLINK_DEBUG for capturing socket info for checkpoint and restore. This adds the module to the kernel config for that use case.

The other PR was approved but was not merged before we moved the kernels into the kernel kit, this is moving that change to the new kit.

Testing done:
Built aws-k8s-1.31 and confirmed module loads.

bash-5.1# modprobe netlink_diag
bash-5.1# lsmod | grep netlink
netlink_diag           16384  0
nf_conntrack_netlink    57344  0
nfnetlink_acct         16384  3 xt_nfacct
nfnetlink              20480  7 nfnetlink_acct,nf_conntrack_netlink,nf_tables
nf_conntrack          184320  7 xt_conntrack,nf_nat,xt_state,xt_nat,nf_conntrack_netlink,xt_connmark,xt_MASQUERADE

Confirmed the same works on aws-k8s-1.24 (5.15 kernel) and aws-ecs-1 (5.10 kernel). I also checked aarch64 for 6.1 kernel.

Terms of contribution:

By submitting this pull request, I agree that this contribution is dual-licensed under the terms of both the Apache License, version 2.0, and the MIT license.

[yeazelm]

#25 has this change upstream. We can merge now that it is present.