validating-admission-policies unit should be enabled in workload clusters.

Some policies have been moved from kyverno-policies to validating-admission-policies in !3779 (merged)

Unfortunately, as discussed here, these policies are not installed in workload clusters. We should enable them.