chore: return error if workspace config violates global constraints

[amandavialva01]

Ticket

CM-575

Description

Return error if workspace invariant config violates global constraints

Test Plan

CI passes (automated testing)

Checklist

• Changes have been manually QA'd
• New features have been approved by the corresponding PM
• User-facing API changes have the "User-facing API Change" label
• Release notes have been added as a separate file under docs/release-notes/
  See Release Note for details.
• Licenses have been included for new code which was copied and/or modified from any external code

[netlify]

✅ Deploy Preview for determined-ui ready!

Name	Link
🔨 Latest commit	b82cf31
🔍 Latest deploy log	https://app.netlify.com/sites/determined-ui/deploys/6716abacc11624000866c526
😎 Deploy Preview	https://deploy-preview-10076--determined-ui.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify site configuration.

[codecov]

Codecov Report

Attention: Patch coverage is 66.66667% with 21 lines in your changes missing coverage. Please review.

Project coverage is 54.43%. Comparing base (912f91e) to head (b82cf31).
Report is 1 commits behind head on main.

Files with missing lines	Patch %	Lines
master/internal/configpolicy/utils.go	61.81%	21 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #10076      +/-   ##
==========================================
- Coverage   58.81%   54.43%   -4.39%     
==========================================
  Files         757     1267     +510     
  Lines      105981   159371   +53390     
  Branches     3631     3631              
==========================================
+ Hits        62330    86748   +24418     
- Misses      43517    72489   +28972     
  Partials      134      134              

Flag	Coverage Δ
backend	45.66% <66.66%> (+1.86%)	⬆️
harness	72.55% <ø> (ø)
web	53.94% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines	Coverage Δ
master/internal/api_config_policies.go	86.59% <100.00%> (ø)
...ternal/configpolicy/postgres_task_config_policy.go	91.66% <100.00%> (ø)
master/internal/configpolicy/utils.go	71.53% <61.81%> (ø)

... and 507 files with indirect coverage changes

[kkunapuli]

I think the change set can be simplified. Let's see if we can

• use one function to unmarshal global config policies (whether NTSC or Experiment)
• keep function names consistent

[kkunapuli]

Great work!