Consider updating `--fix-type kickstart` to generate kickstart with double oscap remediation

This might potentially prevent some rules failing right after the system installation (like https://github.com/RHSecurityCompliance/contest/commit/06104a41f33f17fd86d6f541f5edfa4896678ea6) because they require running remediation one more time to fix.