DCSW: Modify profile upload to allow SCEP CSP upload and validate it meets our requirements

[JordanMontgomery]

Related user story

TODO

Task

Modify Windows profile upload validation to allow SCEP CSP upload and validate that it meets our requirements as far as variable usage(if custom SCEP CA vars are used for instance, both challenge and URL must be used), LocURIs used and that all parts for this experimental SCEP CSP are specified. Reject upload with appropriate error otherwise

This profile, and only this type of SCEP profile, should also allow Exec commands. See example here: #34063 for changes necessary for this

Condition of satisfaction

TODO

[JordanMontgomery]

Calling out that this needs to also work on the gitops side which may be a different codepath due to batch upload