Policy-as-Code for common misconfigurations

[all4code]

Extend Kyverno/OPA rules to cover common misconfigurations (e.g., no privileged pods, enforce pod security standards).