Protected containers: Add DELETE REST API for container protection rules

• Please check this box if this contribution uses AI-generated content (including content generated by GitLab Duo features) as outlined in the GitLab DCO & CLA

What does this MR do and why?

Protected containers: Add DELETE REST API for container protection rules

This MR adds the DELETE route to the REST API for container protection rules to allow deleting existing container protection rules.

This is part of #457518 (closed) and still behind a feature flag.

It's the equivalent to the DELETE endpoint for package protection rules, but for the container registry.

🛠 with ❤ at Siemens

MR acceptance checklist

MR Checklist ( @nwittstruck)

• Changelog entry added, if necessary
• Documentation created/updated via this MR
• Documentation reviewed by technical writer or follow-up review issue created
• Tests added for this feature/bug
• Tested in all supported browsers
• Conforms to the code review guidelines
• Conforms to the merge request performance guidelines
• Conforms to the style guides
• Conforms to the javascript style guides
• [] Conforms to the database guides

How to set up and validate locally

1. Enable feature flag via rails c:

Feature.enable(:container_registry_protected_containers)

2. Create a new container protection rule:

curl -k --request POST \
  --url https://gdk.test:3443/api/v4/projects/7/registry/protection/rules \
  --header 'Authorization: Bearer ypCa3Dzb23o5nvsixwPA' \
  --header 'Content-Type: application/json' \
  --data '{
	"repository_path_pattern": "flightjs/flight-needs-to-be-a-unique-path",
	"minimum_access_level_for_push": "maintainer",
        "minimum_access_level_for_delete": "maintainer"
    }'

3. Now you can delete this rule - just adjust the id to the id returned by the previous command:

curl -k --request DELETE \                                                                                                                                                                 
  --url https://gdk.test:3443/api/v4/projects/7/registry/protection/rules/1 \
  --header 'Authorization: Bearer ypCa3Dzb23o5nvsixwPA'

Related to #457518 (closed)

spec/support/shared_examples/requests/api/protection_rules_shared_examples.rb

@@ -25,6 +25,7 @@
   let(:valid_project_id) { project.id }
   let(:valid_protection_rule_id) { protection_rule.id }
   let(:other_project_id) { other_project.id }
+  let(:url) { "/projects/#{project_id}/#{path}" }
 
   where(:project_id, :protection_rule_id, :status) do
     ref(:valid_project_id) | 'invalid'                | :bad_request
@@ -33,8 +34,6 @@
   end
 
   with_them do
-    let(:url) { "/projects/#{project_id}/#{path}" }
-
     it_behaves_like 'returning response status', params[:status]
   end
 end
@@ -42,14 +41,14 @@
 RSpec.shared_examples 'rejecting protection rules request when invalid project' do
   using RSpec::Parameterized::TableSyntax
 
+  let(:url) { "/projects/#{project_id}/#{path}" }
+
   where(:project_id, :status) do
     'invalid'               | :not_found
     non_existing_record_id  | :not_found
   end
 
   with_them do
-    let(:url) { "/projects/#{project_id}/#{path}" }
-
     it_behaves_like 'returning response status', params[:status]
   end
 end