Add override for failurePolicy to Helm chart

Customers need a way to override failurePolicy in the ClusterPolicy in case they choose to allow admission if Kyverno is not available. There should be a global setting to adjust all policies