*_container_image policies should now check
project_feature.container_registry_access_level instead of
projects.container_registry_enabled.