Add knob in install config for `--enforce-container-sigpolicy`

[jbtrystram]

Let's surface this in the install config toml so we can pipe this through image-builder

[cgwalters]

Sure, sounds fine to me.

Though this also more strongly relates to containers/skopeo#2714 which would be the better general solution