feat: ARSO security optimization

Author: jacksyrm

playbook/Executables/AtlasModules/Scripts/Tweaks/security/disable-automatic-restart-signon.psd1

@@ -0,0 +1,8 @@
+@{
+    Name        = 'Disable Automatic Restart Sign-On'
+    Description = 'Stops Windows caching your credentials across a restart to auto-restore your last session behind the lock screen; you sign in manually instead'
+    Registry    = @(
+        # https://www.stigviewer.com/stig/microsoft_windows_10/2022-04-08/finding/V-43245
+        @{ Path = 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System'; Name = 'DisableAutomaticRestartSignOn'; Type = 'DWord'; Data = 1 }
+    )
+}

playbook/Executables/AtlasModules/Scripts/Tweaks/tweaks.manifest.psd1

@@ -193,6 +193,7 @@
             Name   = 'security'
             Tweaks = @(
                 'block-anonymous-enum-sam'
+                'disable-automatic-restart-signon'
                 'disable-remote-assistance'
             )
         }