fix: kube-apiserver-arg can just hold one arg

roles/rke2/templates/config.yaml.j2

@@ -38,7 +38,7 @@ cloud-provider-name: "{{ cloud_provider_name }}"
 resolv-conf: "{{ resolv_conf_server }}"
 {# disable-cloud-controller: true #}
 write-kubeconfig-mode: "0644"
-kube-apiserver-arg: "--enable-admission-plugins=NodeRestriction,PodSecurityPolicy,PodNodeSelector,PodTolerationRestriction --feature-gates=JobTrackingWithFinalizers=true,PodSecurity=true"
+kube-apiserver-arg: "--enable-admission-plugins=NodeRestriction,PodSecurityPolicy,PodNodeSelector,PodTolerationRestriction"
 
 {% if cni is defined and cni | length > 0 %}
 cni: "{{ cni }}"