genpolicy: unit test cases should have provenance information

Which feature do you think can be improved?

The genpolicy integration tests (./src/tools/genpolicy/tests/policy/testdata/**/testcases.json).

How can it be improved?

The cases have been observed by different people, massaged and copied around to the point where it's not clear what system they were observed on, if any.

Since this was mostly my doing, I'd like to clean this mess by updating the existing testcases as follows:

1. Describe the test setup used for creating the requests.
2. Introduce a mechanism for adjusting the genpolicy settings per integration test dir.
3. Deploy the pod.yamls from the test dirs and record the observed requests.
4. Canonicalize the resulting requests with jq --sort-keys and replace the existing ones.

Additional Information

#11354 is currently blocked on this:

1. Most (all?) of the CreateContainer cases did not include an image_guest_pull storage, or any other source for the rootfs.
2. The cpath adjustment we do for e2e tests does not happen for genpolicy integration tests. Instead, the paths in the requests were manipulated to match the settings default.

I hope that we can automate the process for gathering test data in a follow-up project, but that would depend on at least something like #11762.