Trusted Application Delivery – shift security left with GitOps and Policy as Code