Write Kyverno policy to automatically apply GPU toleration for GPU workloads

See current howto: https://k8s-docs.hsrn.nyu.edu/gpu/

If any container's resources contain nvidia.com/gpu and there is no toleration for nvidia.com/gpu:NoSchedule, add it.