Thanks to @izh1979 for the idea

Disabling kernel modules is a radical method to cut the kernel attack
surface. It may be useful for some systems.

Quoting CLIP OS recommendation:
```
Disable module loading once systemd has loaded the ones required for the
running machine according to a profile.
```

--kernel-version option will extract the version in /proc/version.
This is especially useful on embedded systems where config.gz doesn't
always contain the kernel version

Signed-off-by: Fabrice Fontaine <fabrice.fontaine@orange.com>

Use 'cut_attack_surface'.

Don't require slab_common.usercopy_fallback=0,
since HARDENED_USERCOPY_FALLBACK was removed in Linux v5.16

Thanks, @SuperSandro2000 

This is guaranteed to work everything including NixOS

This option isn't worth the performance impact.

Refers to #82.

**kconfig-hardened-check** is a tool for checking the security hardening
options of the Linux kernel.

In addition to Kconfig options, it now can check kernel cmdline
arguments and sysctl parameters.

It's time to give this project a new name that describes it better:
**kernel-hardening-checker**.

AND(AND()), OR(OR()) are not supported intentionally.

(The nested AND/OR should be tested separately, stay tuned)

This rewrites the commit aa7e1bff.

Refers to #86.