Allow network access in render pipelines

[droot]

kpt fn render should allow network access to the functions being run as part of the pipeline.

[This issue](https://github.com/GoogleContainerTools/kpt/issues/2450 has more context around the use-cases.

Possible UX:

kpt fn render --allow-network