pub(crate) fn final_repository_policy( image_fsverity_policy: Option<bool>, requested_relaxed: bool, ) -> bool