add option to specify whether the runner should be locked

I added an option to specify whether the runner should be locked to a specific project. This is handled via an environment variable inside _env_vars.tpl. It defaults to true, which is the same as the current default of the gitlab runner.

Please let me know what needs to be done to merge this upstream.