Create policy for workspace_variables

MR: Pending

Description

We want to expose workspace_variables in graphQL. For this we need to add a new authorization Policy to define who can access this.

Reference:

• Declarative Policy Framework
• Workspace Policy

Acceptance Criteria

• Add a new policy to authorize workspace_variables
• Add unit tests