KubeconNA2024: Add alters for pulling images with specpfied CVEs that are approved as exceptions

[steven-zou]

We can enable policy to prevent pullings some images with CVEs of specified severity.
We can also add CVE exceptions to passthrough some CEVs.

For the pulling actions of images with CVE exceptions, the pull actions should be recorded. The record may include who pulled which image at when.