https://github.com/quay/clair/discussions/1164

This is a task tracking implementation of the mutating webhook as outlined above.

The templating mechanism is still up in the air. I'm currently leaning toward using URIs to describe k8s resources to be inlined at mutation time.

This may cause security boundary weirdness: consider a templated ConfigMap that inlines Secret items. This task should be superseded by implemented multiple configuration file support if this is deemed a problem.

Acceptance criteria should involve an end-to-end test of this component in isolation, not necessarily end-to-end operator installation.