print out matching files/directories when doing SELinux label checks

[miabbott]

In the selinux_verify role, we just output:

The file /var had an SELinux label of 'unlabeled_t'

But we should be able to print out any and all files/subdirs that match by just saving off the stdout and printing it in the fail: statement

See also #239 and #253