Add ci_component_source_policy JSON and concern

What does this MR do and why?

Add ci_component_sources_policy schema and concern.

type: ci_component_source_policy
name: CI Component Policy
description: With this policy we will allow pipelines to run CI Components only from predefined sources.
enabled: true
allowed_sources:
  projects: # Only components from gitlab.com/project-a and my_org.com/group-a/project-1 can be run in the pipeline
  - path: gitlab.com/project-a
  - path: my_org.com/group-a/project-1
  groups: # Only components gitlab.com/group-b can be run in the pipeline
  - path: gitlab.com/group-b
policy_scope:
  compliance_frameworks:
    - id: 3

Changelog: added

#465264 (closed)