Challenge question settings

[ph1403]

I would like to suggest a setting either globally with admin defined questions or on a question by question basis so that we can bypass the text.contains() validation [https://github.com/pwm-project/pwm/blob/7c849c94b7f91168c9a6afc250e14c9c6b57717b/server/src/main/java/password/pwm/svc/cr/NMASCrOperator.java#L537].

I would also like to suggest allowing for challenge questions to be bit more modular such that they could be required for Help Desk questions without the need for self-service reset questions. I find clients often like the help desk ones for ID Proofing, but don't like security questions for password reset.