Create policy on what providers/modules will be accepted into the OpenTofu registry

[cam72cam]

There are some basic checks that are already in the bumper that we should adopt (provider has valid release, module has valid tags).

However we should create a policy that covers additional items such as:

• Valid LICENSE file
• If it's a fork:

• Does it have additional tags on top of the parent repo?
• Is it a novel change that has already tried to be submitted upstream?
• Does it add unique functionality to the registry?

I don't know exactly what our criteria should be, but those are a few places to start the discussion.