[Bug] CSPM GCP Rule 4.4 doesn't consider project defaults

### Motivation
The [rule](https://github.com/elastic/cloudbeat/blob/main/security-policies/bundle/compliance/cis_gcp/rules/cis_4_4/rule.rego) definition says: "**Ensure Oslogin Is Enabled for a Project**".
To verify this property is enabled on every instance on a GCP account - we should check two items:
1. A [project defines the default](https://cloud.google.com/compute/docs/oslogin/set-up-oslogin#enable_os_login_for_all_vms_in_a_project) OS login for all instances.
2. Any [instance can override](https://cloud.google.com/compute/docs/oslogin/set-up-oslogin#enable_os_login_for_a_single_vm) it by setting enable-oslogin in the instance metadata.

### Implement the rule
- [ ] All projects have `enable-oslogin` set to true
- [ ] No instance should have `enable-oslogin` set to false