Move rego utilities to some kind of "stackable library of rules"

[NickLarsenNZ]

This should ideally be moved to some kind of "stackable library of rules", but we don't currently have a good way to deploy and manage that.

Originally posted by @nightkr in #433 (comment)

[NickLarsenNZ]

@nightkr @soenkeliebau, I had a thought about the possibility of storing OPA packages in an OCI registry.

I haven't looked into it deeply, but I do see search results for "opa package oci", like: https://oras.land/blog/gatekeeper-policies-as-oci-image/

[fhennig]

Hmm, what would be the simplest way to do this? Rego rules are just deployed as ConfigMaps. What are the "management" features we need? We could just put the files somewhere and then you can kubectl apply them from there? 🤷