feat: add back container policy hardening

config/common/common-scripts.yml

@@ -4,4 +4,5 @@ scripts:
   - setfilepermissions.sh
   - disablesealertpopups.sh
   - homebrewanalyticsoptout.sh
+  - hardencontainerpolicy.sh
   - httpsmirrors.sh

config/scripts/hardencontainerpolicy.sh

@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+
+# Tell build process to exit if there are any errors.
+set -oue pipefail
+
+sed -i 's/insecureAcceptAnything/reject/' /usr/etc/containers/policy.json