Test verification for package removal

[chris-rock]

We need to test a default setting for package removal, since the current state my be a little bit confusing for hardening implementors. See the following discussions:

• Packages chef-os-hardening#12
• Update readme, todo, changelog, vars ansible-collection-hardening#30

Currently, we decided to set the default for package removal to true:

default[:security][:packages][:clean] = true

[rndmh3ro]

Isn't this done here, or do I not understand the issue?
https://github.com/hardening-io/tests-os-hardening/blob/master/lockdown/inspec/package_spec.rb