To allow us to more appropriately target organisational policies around
i.e. whether a repository is public, used for sensitive purposes, or
otherwise, we can now consume the data available in
`repository_metadata` with our Policies.