Add disallow nginx snippet policy

[max0ne]

This adds a policy to disallow usages of all NGINX snippet annotations, in response to NGINX Ingress Controller vulnerability CVE-2021-25742