[openSUSE/open-build-service] 9d6472: Move `can_decline_request?` logic to a pundit policy