FLEX-WP-0006: implement ops-warden signing gate policy

examples/ops-warden/subject_manifest.yaml

@@ -0,0 +1,54 @@
+id: subjects:ops-warden-platform
+tenants:
+  - id: tenant:platform
+    name: Platform Tenant
+subjects:
+  - id: platform-steward
+    type: Agent
+    display_name: Platform Steward
+    organization_relation: ServiceProvider
+    roles:
+      - Operator
+    groups:
+      - group:ops-warden-admins
+    tenant: tenant:platform
+    metadata:
+      actor_type: adm
+  - id: ci-deploy-agent
+    type: Agent
+    display_name: CI Deploy Agent
+    organization_relation: ServiceProvider
+    roles:
+      - Operator
+    groups:
+      - group:ops-warden-agents
+    tenant: tenant:platform
+    metadata:
+      actor_type: agt
+  - id: backup-automation
+    type: Automation
+    display_name: Backup Automation
+    organization_relation: ServiceProvider
+    roles:
+      - Operator
+    groups:
+      - group:ops-warden-automations
+    tenant: tenant:platform
+    metadata:
+      actor_type: atm
+groups:
+  - id: group:ops-warden-admins
+    display_name: Ops Warden Admin Actors
+    members:
+      - platform-steward
+    tenant: tenant:platform
+  - id: group:ops-warden-agents
+    display_name: Ops Warden Agent Actors
+    members:
+      - ci-deploy-agent
+    tenant: tenant:platform
+  - id: group:ops-warden-automations
+    display_name: Ops Warden Automation Actors
+    members:
+      - backup-automation
+    tenant: tenant:platform