Add OPA policy constraint

Overview

Minimum, use an OPA policy to restrict deployment of some asset/resource