Add a doc explaining fail closed behavior in Ratify + GK

[akashsinghal]

Explain what fail closed vs fail open means in context of Ratify + GK. This includes discussing how GK's failed closed/open policy affects ratify. Also discuss how system error result in fail close/open in Constraint Template. Finally, talk about difference in behavior for mutation and admission