Added create capability on cfengine_var_lib_t:dir to cf-hub

Found to be needed for kernel policy version 33 on rhel-9 hub.

Ticket: ENT-12466
Changelog: title
(cherry picked from commit e285fb6)

 Conflicts:
	misc/selinux/cfengine-enterprise.te.all

cf-reactor does not yet process scheduled reports in 3.21.x so conflict here is due to removal in master/3.24.x: #5525

misc/selinux/cfengine-enterprise.te.all

@@ -419,7 +419,7 @@ allow cfengine_hub_t cfengine_postgres_t:unix_stream_socket connectto;
 allow cfengine_hub_t unreserved_port_t:tcp_socket name_connect;
 
 allow cfengine_hub_t cfengine_log_t:dir getattr;
-allow cfengine_hub_t cfengine_var_lib_t:dir { add_name getattr open read search write remove_name };
+allow cfengine_hub_t cfengine_var_lib_t:dir { add_name create getattr open read search write remove_name };
 allow cfengine_hub_t cfengine_var_lib_t:file { create ioctl lock write unlink append setattr };
 allow cfengine_hub_t cfengine_var_lib_t:lnk_file { getattr read };
 allow cfengine_hub_t cfengine_var_lib_t:sock_file { create unlink };