Allow altering trusted clone plugins and filter them via tag

[6543]

Make it possible to let an admin define privileged- and trusted-clone-plugins by name and tag.

If no tag is specified it will allow all tags as it was before.

[woodpecker-bot]

Tearing down https://woodpecker-ci-woodpecker-pr-4074.surge.sh

[codecov]

Codecov Report

Attention: Patch coverage is 57.62712% with 25 lines in your changes missing coverage. Please review.

Project coverage is 26.96%. Comparing base (8e0af15) to head (4310ce4).
Report is 1 commits behind head on main.

Files with missing lines	Patch %	Lines
cli/lint/lint.go	0.00%	7 Missing ⚠️
cli/exec/exec.go	0.00%	4 Missing ⚠️
pipeline/frontend/yaml/linter/option.go	0.00%	4 Missing ⚠️
cmd/server/setup.go	0.00%	3 Missing ⚠️
pipeline/frontend/yaml/linter/linter.go	85.71%	2 Missing and 1 partial ⚠️
pipeline/frontend/yaml/compiler/compiler.go	77.77%	1 Missing and 1 partial ⚠️
pipeline/frontend/yaml/types/container.go	0.00%	2 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #4074      +/-   ##
==========================================
+ Coverage   26.91%   26.96%   +0.05%     
==========================================
  Files         394      394              
  Lines       27380    27416      +36     
==========================================
+ Hits         7368     7393      +25     
- Misses      19312    19323      +11     
  Partials      700      700              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.