Follow-up from "Streamline execute logic for Projects::UpdateMirrorService"

The following discussion from !162678 (merged) should be addressed:

• @brodock started a discussion: (+1 comment)

  should this and other can? checks be refactored and extracted to their own Policies? https://docs.gitlab.com/ee/development/policies.html that way we can test then in isolation as well.