Refactor OPA CI Test to work in BB CI

In its current state the OPA test cannot be enabled in BB CI for two basic reasons:

• we can't turn everything to deny because we need to install BB packages that still have violations
• the test expects all constraints to be turned to deny

Different ways we could tackle this:

• Refactor the test to dynamically check what is turned to deny and applies good/bad yamls based on that
• Refactor testing to have two different tests that can be conditionally enabled (i.e. bbtests.package.enabled and bbtests.bb.enabled) - where the BB test "does things differently" to work with BB
• Any other way you can think of to accomplish the goal!

AC:

• Test refactored and package MR merged with new tag for test
• Test runs successfully in BB CI, BB MR merged