mi-laf

We'd also love to enable immutability, also because it otherwise pops up in Security Hub (https://docs.aws.amazon.com/securityhub/latest/userguide/ecr-controls.html#ecr-2). There have been multiple suggestions from checking specifically for `latest` to providing a configuration...