WIP: trusted tasks proposal

[st3penta]

My Rego logic proposal, based on rule matchers, for the following rules format:

trusted_task_rules:
  allow:
    - name: "rule name"
      pattern: "oci://quay.io/konflux-ci/tekton-catalog/*"
      versions: [">0.1", "<=0.5"]     # optional
      effective_on: 2025-11-15        # optional
      expires_on: 2026-11-15          # optional
      signing_key: abcde              # optional (require if set)
    - ...
  deny:
    - name: "rule name"
      pattern: "oci://quay.io/konflux-ci/tekton-catalog/task-buildah"
      versions: ["<0.3"]              # optional
      effective_on: 2025-11-15        # optional
      expires_on: 2026-11-15          # optional
    - ...