AF Cluster Updates

• Addressed additional CVEs, including DirtyFrag and ssh-keysign-pwn vulnerabilities
• Added three head nodes to provide dedicated capacity for infrastructure services, helping separate system workloads from user batch workloads
• Drafting migration plans to transition the cluster to Kubespray-based management and a highly available (HA) control plane