Resolve "Kyverno excludeContainers policy syntax issue"

General MR

Summary

Resolve kyverno policy syntax errors

Relevant logs/screenshots

See CI tests

Linked Issue

#173 (closed)

Upgrade Notices

Previously, the restrict-capabilities.yaml policy only allowed a single additional capability to be added. Now, it correctly supports multiple capabilities being added.

This should not result any any unexpected behavior because the new policy is more lenient and should allow it to be more easily consumed by downstream teams.