refactor: update DDM logic for nested keys

DDM configuraitons with nested keys are correctly generated

custom/rules/.gitignore

@@ -1,4 +0,0 @@
-# Ignore everything in this directory
-*
-# Except this file
-!.gitignore

includes/mscp-data.yaml

@@ -97,6 +97,7 @@ ddm:
     - com.apple.configuration.services.configuration-files
     - com.apple.configuration.passcode.settings
     - com.apple.configuration.diskmanagement.settings
+    - com.apple.configuration.softwareupdate.settings
   services:
     com.apple.bash: /etc/
     com.apple.pam: /etc/pam.d/

rules/os/os_software_update_app_update_enforce.yaml

@@ -28,7 +28,7 @@ references:
     - N/A
   cis:
     benchmark:
-      - 1.4 (level 1)
+      - 1.5 (level 1)
     controls v8:
       - 7.3
       - 7.4

rules/system_settings/system_settings_download_software_update_enforce.yaml

@@ -38,6 +38,6 @@ mobileconfig: false
 mobileconfig_info:
 ddm_info:
   declarationtype: com.apple.configuration.softwareupdate.settings
-  ddm_key: 
-    AutomaticActions: Download
-  ddm_value: AlwaysOn
+  ddm_key: AutomaticActions
+  ddm_value: 
+    Download: AlwaysOn

rules/system_settings/system_settings_security_update_install.yaml

@@ -49,6 +49,6 @@ mobileconfig: false
 mobileconfig_info:
 ddm_info:
   declarationtype: com.apple.configuration.softwareupdate.settings
-  ddm_key: 
-    AutomaticActions: InstallSecurityUpdate
-  ddm_value: AlwaysOn
+  ddm_key: AutomaticActions
+  ddm_value: 
+    InstallSecurityUpdate: AlwaysOn