Mount eBPF filesystem by default on 1.27+

[cartermckinnon]

Issue #, if available:

Closes #728

Description of changes:

Mounts the eBPF filesystem by default.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

Testing Done

> make 1.25
# succeeds, launched an instance
> mount | grep bpf
none on /sys/fs/bpf type bpf (rw,nosuid,nodev,noexec,relatime,mode=700)

[cartermckinnon]

spoke with @mmerkes, I'll change this to a runtime option so that we don't cause issues if folks are already mounting this themselves.

[daisuke-yoshimoto]

@cartermckinnon @mmerkes

When this PR is completed, will "Container runtime for GurdDuty" be released soon?

[mmerkes]

@daisuke-yoshimoto This is a standalone thing and has no relation to anything else on our end.