k/org: Add `restrictions` tool and force strict YAML unmarshalling

[justaugustus]

Part of https://github.com/uwu-tools/peribolos/issues/169. Carries elements of the following PRs: https://github.com/kubernetes/org/pull/2614, https://github.com/kubernetes/org/pull/4421

• cmd: Add restrictions from kubernetes/org
• go.mod: Update bmatcuk/doublestar to v4.6.0
• go.mod: Replace ghodss/yaml with sigs.k8s.io/yaml
• Use strict unmarshalling for YAML configs
• internal: Add yaml package
• options/merge: Dedupe FlagMap logic

Signed-off-by: Stephen Augustus foo@auggie.dev

[codecov[bot]]

Codecov Report

Merging #257 (093254e) into main (4bc6288) will decrease coverage by 0.27%. The diff coverage is n/a.

@@            Coverage Diff             @@
##             main     #257      +/-   ##
==========================================
- Coverage   60.12%   59.85%   -0.27%     
==========================================
  Files           7        7              
  Lines        1141     1141              
==========================================
- Hits          686      683       -3     
- Misses        419      421       +2     
- Partials       36       37       +1     

see 1 file with indirect coverage changes

:mega: We’re building smart automated test selection to slash your CI/CD build times. Learn more