nixos/release-combined: add {,latestKernel.}hardened

These now depend on an external patch set; add them to the release tests
to ensure that the build doesn't break silently as new kernel updates
are merged.