AUTH-330: audit: allow filtering events by pod security admission annotations

[stlaz]

/assign @ibihim /cc @deads2k

[deads2k]

The refactor makes it impossible to allow an event based on the content of other events. I don't care enough to stop it since we always re-introduce the concept. I'll leave the equivalence check to @ibihim

/approve

[stlaz]

I think you might still be able to build a stateful filter with this new pattern, even though it may not be as clean of a solution as before.

[ibihim]

/lgtm

In the context of this repository and PR, the change looks legit.