fix(security): validate folder + restrict --image-tag in ncl groups create/update (CWE-22 + image pinning)

fix(security): validate folder + restrict --image-tag in ncl groups create/update (CWE-22 + image pinning) #1371