[openSUSE/open-build-service] 7e771d: Create Pundit policy for Token::Workflow