Add an account-wide setting to ignore repository-supplied runtime configuration

We’d like an administrator-controlled setting that ignores repository-supplied runtime configuration by default, with an allowlist for specific repositories. The existing feature:ignore_runtime_config label is useful per stack, but does not give us a consistent account-wide option. Stack level labels are also easy to add/remove.

In a large organization with many repositories, repository write access is distributed across teams. Allowing each repository to supply runtime configuration gives those files a way to affect Spacelift runs. We’d like to limit that capability to repositories we explicitly choose as part of our security controls.