Add linting for the new and/or enhanced GraphQL, CORS, ExternalCallout and enhanced SpikeArrest, OAuthv2 hybrid policies

[n1c0la]

Ref: https://cloud.google.com/apigee/docs/api-platform/reference/policies/graphql-policy https://cloud.google.com/apigee/docs/api-platform/reference/policies/cors-policy https://cloud.google.com/apigee/docs/api-platform/reference/policies/external-callout-policy https://cloud.google.com/apigee/docs/api-platform/reference/policies/spike-arrest-policy#useeffectivecount

https://cloud.google.com/apigee/docs/api-platform/reference/policies/spike-arrest-policy#useeffectivecount https://cloud.google.com/apigee/docs/api-platform/reference/policies/oauthv2-policy#RFCCompliantRequestResponseElement

https://cloud.google.com/apigee/docs/release/notes/apigee-release-notes#apigee-hybrid-releases

[DinoChiesa]

There's a bunch of validation work we could do here.

[ssvaidyanathan]

CORS - added in v2.22.0