https://github.com/github/artifact-attestations-opa-provider/blob/67d793ccea5f41ff30dd674cda4612eb1ca52563/validation/from-org-with-signer-constraint-template.yaml#L36 uses hardcoded data instead of parameterized constraint values. can we move these into easy to customize constraint parameters?