Add 'default-failure-policy` flag to control failure policy on constraint template if the field is missing

This flag should be set to `Fail` by default, but when FailurePolicy field is missing on ConstraintTemplate this flag should be used to set failure policy on constrainttemlpate as well as generated VAP if any to mitigate https://github.com/open-policy-agent/gatekeeper/issues/4530