Removes ECDHE-ECDSA-AES128-GCM-SHA256 and ECDHE-RSA-AES128-GCM-SHA256 ciphers from:
- from ingress traffic getting to nginz; 
- from ingress-traffic getting to nginz-cannon; 
- and if applicable (not installed by default) backoffice (which was using a larger list of ciphers). 
- removes these ciphers from being used/allowed in server-to-server federation exchanges.

Also removes `TLS_CHACHA20_POLY1305_SHA256` in case TLS 1.3 is active.

Co-authored-by: Sebastian Willenborg <[email protected]>