- Introduce restrict_user_defined_variables project setting
  and allow it to be set via API.
- Define policy for user defined variables.
- Inject user-defined variables consistently throughout
  the codebase.
- Allow user-defined variables to be set only by maintainers
  if the project setting is enabled.
- Allow passing variables from parent to child pipeline