Fix TF role preset rule addition logic

[hugoShaka]

This PR solves two bugs:

• all the resources were in a single allow rule, while our preset rule addition logic only knows how to add new rules, not resources to existing rules
• the rule addition logic does not apply for every preset, it uses the defaultAllowRules map which did not contain the TF role. We were not even trying to add new rules to the TF role.

Historical reconstitution:

This can affect the following resources:

types.KindDynamicWindowsDesktop,
types.KindBot,
types.KindInstaller,
types.KindAccessMonitoringRule,
types.KindStaticHostUser,
types.KindWorkloadIdentity,

Fixes: #50208
Changelog: FIxes a bug causing the terraform-provider preset role to not automatically allow newly supported resources.

[public-teleport-github-review-bot]

@hugoShaka See the table below for backport results.

Branch	Result
branch/v16	Failed
branch/v17	Create PR