Add migration for new setting settings.measurement.excluded-settings

[ginglis13]

Issue number:

Is half of #4872 (the non-pcrsys changes)

Description of changes:

Add migration for settings.measurement.excluded-settings

Testing done:

Forward Migration

updog check-update -a --json output confirmed v1.64.0 was discoverable:

• Variant: aws-ecs-3
• Architecture: x86_64
• Version: 1.64.0
• Migration list included migrate_v1.64.0_measurement-excluded-settings

updog update -i 1.64.0 -r -n output:

Starting update to 1.64.0
Reboot scheduled for Mon 2026-07-20 19:07:03 UTC
Update applied: aws-ecs-3 1.64.0

Instance rebooted and came back online at v1.64.0

$ apiclient get settings.measurement
{}

• apiclient get settings.measurement returned {} with exit code 0

{
  "os": {
    "arch": "x86_64",
    "build_id": "9e392d7b",
    "pretty_name": "Bottlerocket OS 1.64.0 (aws-ecs-3)",
    "variant_id": "aws-ecs-3",
    "version_id": "1.64.0"
  }
}

Backward Migration

1. signpost rollback-to-inactive
2. reboot
3. Instance returned to v1.63.0

$ apiclient get settings.measurement
{}

• apiclient get settings top-level keys: autoscaling, aws, boot, cloudformation, ecs, host-containers, kernel, metrics, motd, network, ntp, oci-defaults, oci-hooks, updates, no measurement

{
  "os": {
    "arch": "x86_64",
    "build_id": "d4932ff8",
    "pretty_name": "Bottlerocket OS 1.63.0 (aws-ecs-3)",
    "variant_id": "aws-ecs-3",
    "version_id": "1.63.0"
  }
}

Terms of contribution:

By submitting this pull request, I agree that this contribution is dual-licensed under the terms of both the Apache License, version 2.0, and the MIT license.

[ginglis13]

^ force push rebases off of new settings-sdk release commit