Watchmaker

**Summary**:

* windows-update-agent-formula
- Supports new windows update settings, `AlwaysAutoRebootAtScheduledTime`
and `AlwaysAutoRebootAtScheduledTimeMinutes`
* scap-formula
- Incorporates content from OpenSCAP Security Guide v0.1.39-1

**Summary**:

* [[PR 574][574]] Updates Windows userdata example to execute pip using
`python -m` when upgrading pip
* windows-update-agent-formula
- Uses newer arguments for reg state, `vname` and `vdata`
- Reduces duplication in windows update data model
- Nests the windows update pillar options under the standard `lookup` key

[574]: https://github.com/plus3it/watchmaker/pull/574

**Summary**:

* ash-windows-formula
- Updates STIG baselines to address all findings in latest SCAP
benchmarks

**Summary**:

* scap-formula
- Incorporates content from OpenSCAP Security Guide v0.1.38-1
- Incorporates content from latest DISA SCAP benchmarks
- Microsoft Internet Explorer 11 STIG Benchmark - Ver 1, Rel 11
- Microsoft Windows 10 STIG Benchmark - Ver 1, Rel 10
- Microsoft Windows 2008 R2 DC STIG Benchmark - Ver 1, Rel 27
- Microsoft Windows 2008 R2 MS STIG Benchmark - Ver 1, Rel 28
- Microsoft Windows 2012 and 2012 R2 DC STIG Benchmark - Ver 2, Rel 11
- Microsoft Windows 2012 and 2012 R2 MS STIG Benchmark - Ver 2, Rel 11
- Microsoft Windows 8/8.1 STIG Benchmark - Ver 1, Rel 21
- Microsoft Windows Server 2016 STIG Benchmark - Ver 1, Rel 4
- Red Hat 6 STIG Benchmark - Ver 1, Rel 18
- Red Hat 7 STIG Benchmark - Ver 1, Rel 2
* dotnet4-formula
- Skips dotnet4 hotfix install if a newer version is already installed
- Creates per-OS maps for hotfix updates, since the hotfix id varies per
OS

**Summary**:

* dotnet4-formula
- Passes version correctly to module.run

**Summary**:

* This version was effectively a no-op, as the submodule was not updated as
intended
* ~dotnet4-formula~
- ~Passes version correctly to module.run~