Create Google Artifact Registry (GAR) reconciler

[sechmann]

• Create GAR repository for teams packages (in management project)
• Create service account with write permission to repository
• Grant NAIS cluster read to repository
• Either:
  1. let team members specify which repositories that should be allowed to push to their repository
  2. periodically or on demand query GitHub API to list all repositories belonging (giving write access) to a team
• or a combination of the two
• Add policies allowing these repositories tokenCreator for the service account mentioned above, so they can use workload identity to push images

[sechmann]

https://docs.github.com/en/rest/teams/teams?apiVersion=2022-11-28#list-team-repositories https://pkg.go.dev/google.golang.org/api@v0.109.0/artifactregistry/v1 https://cloud.google.com/artifact-registry/docs/reference/rest#rest-resource:-v1.projects.locations.repositories

[christeredvartsen]

Resolved by #109.