Add cluster.Spec.Containerd.SELinuxEnabled field that enables SELinux in containerd. With SELinux enabled, all pods that use HostPath volumes must run with SELinux label `spc_t`, otherwise SELinux denies the pods to touch the host filesystem.