Move CAPABILITIES setting to ISAR instead of in sub-repo

[tsundvoll]

Describe the improvement you would like to see
The sub-repos rarely, if ever, need to check CAPABILITIES settings, this is more for ISAR to use anyways.

If the sub-repos need to check CAPABILITIES they can still get if from isar.settings.settings.CAPABILITIES

How will this change existing functionality?
It enables more easily and understandably overwrite CAPABILITIES by having a ISAR_CAPABILITIES variable in your environment

How will this improvement affect the current Threat Model?
N/A

[aeshub]

This issue has automatically been marked as stale as there has been no activity for 60 days.