The constraint template library includes a new template: K8sPSSRunAsNonRoot

## Feature The constraint template library includes a new template: `K8sPSSRunAsNonRoot`. For reference, see the [Constraint template library](https://cloud.google.com/anthos-config-management/docs/latest/reference/constraint-template-library). ## Change Policy Controller bundles have been updated to the following versions: `cis-gke-v1.4.0`: `202402.0-preview`, `nist-sp-800-190`: `202402.0`, `nist-sp-800-53-r5`: `202402.0`, `pci-dss-v3.2.1`: `202402.0`, `pss-baseline-v2022`: `202402.0`, `pss-restricted-v2022`: `202402.0`. For reference, see [Policy Controller bundles overview](https://cloud.google.com/anthos-config-management/docs/concepts/policy-controller-bundles). ## Fix Fixed a regression introduced in 1.16.0 that limits the length of the Secret name referenced in the `spec.git.secretRef.name` field of the RootSync object. ## Fix Fixed a regression introduced in 1.17.0 that caused Config Sync to sometimes [fail to pull the latest commit from a Git branch](https://cloud.google.com/anthos-config-management/docs/how-to/known-issues#git-sync-issue) by upgrading git-sync (Config Sync dependency for pulling from git) from v4.1.0 to v4.2.1.