gitops cicd policy