fix: rename constraints to avoid uninstall during upgrade

After moving constraints to OPA, an upgrade will cause the constraints to be uninstalled. Gatekeeper updates first, with the same names for the constraints. CA updates second and removes the constraints. To avoid this, I have renamed every constraint to match the file name / value name. OPA will install duplicate constraints during the upgrade. CA will then uninstall its constraints to leave one set.