Add policy for creating immutable rule

From #521750 (comment 2387878418),

This policy could be named create_immutable_container_protection_tag_rule to only allow Owner+ users to be able to create an immutable tag rule.

Implementation plan:

• Add new policy: create_immutable_container_protection_tag_rule
• Add policy check when creating immutable tag rule