Reimplement pull-policy validation
This MR ports https://gitlab.com/gitlab-org/security/gitlab-runner/-/merge_requests/75+ from the security repo to the canonical repo. No changes to the original MR. See the original MR for many more details.
Edited by Axel von Bertoldi