New offline capabilities

Explanation Today, kyverno apply without --cluster turns off Kubernetes-style apiCall context entries. Policies that LIST or GET other objects (for example "is there a PodDisruptionBudget for ...