feat(ci.jenkins.io) allow WinRM and CIFs over TCP from controller to private agent subnets + disable Network ACLs

[dduportal]

Related to jenkins-infra/helpdesk#4316

This PR sets the ground for prototying Windows EC2 agents using WinRM instead of SSH (see jenkins-infra/helpdesk#4316 (comment)) which should be faster.

We need to open a set of ports to allow WinRM protocol (both HTTP and HTTPS channels), along with CIFS over TCP as per the EC2 plugin help:

Note: we are removing the Network ACLs here as a first step:

• If we can succeed in using WinRM, then we'll add them back (with the new rules)
• If we fail with WinRM or stick to SSH for Windows, then we'll rollback the Network ACL

[dduportal]

Plan: 8 to add, 0 to change, 2 to destroy.

• 2 Network ACLs objects to remove
• 3 privates subnets X 2 SG rules out of controller subnet: 6
• • 2 SG rules in the private subnet for EC2 agents: 8 new objects