SPIKE: Research Kyverno Policies integration with IronBank manifests

During deployments some of the images used by products can be several versions behind due to missing/incomplete Renovate configs, stale issues, or backlog. We need a way to detect when a package is being deployed that is stale and outdated, ideally from air-gapped environment as well.

This would require an IronBank packages manifest to be included with every BB release so that latest image tags can be cross-references against packages that are being deployed.