test: ceph: cover the rolling-restart health classification

Covers the cases a later change could regress. The cephx cipher checks
must not block a rolling restart, a real error next to them must, the
noout flag that our own documentation recommends must not, a muted
OSDMAP_FLAGS must still be judged by its flags, and an unknown
severity has to block.

Also covers the entry check, the check between steps and the status
annotation, because the annotation has to reach the same answer as the
classifier for every check.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>