Enforce pod security policies

Created by: beyang

Replaces https://github.com/sourcegraph/deploy-sourcegraph/issues/482