Remove the notion of "Enforcement Action" from the engine interface

[maxsmythe]

Currently, Engine is responsible for returning an enforcement action. This was originally intended to allow for the possibility of dynamic enforcement actions, but that would be incompatible with the capabilities of the CEL KEP. As such, it should be removed.

frameworks/constraint/pkg/client/drivers/to_result.go

Lines 82 to 90 in 9f70a3e

	enforcementAction, found, err := unstructured.NestedString(constraint.Object, "spec", "enforcementAction")
	if err != nil {
	return nil, err
	}
	if !found {
	enforcementAction = apiconstraints.EnforcementActionDeny
	}
	result.EnforcementAction = enforcementAction

[ritazh]

What kind of impact/issue does removing "Enforcement Action" present? Will there be any backward compatibility issues?

[maxsmythe]

No user-facing backwards compatibility issues... we never piped this through to users. Anyone who has written a driver may be affected, but I'm not aware of anyone whose done that (and that part of the CF is alpha).