Block binaries at PR-time

[puerco]

Minder can check for binaries in the repository but we should expand the feature to detect and block pull requests that try to check in binaries into the repository.

[evankanderson]

For this, we probably need to improve the PR remediation type -- today, each PR remediation is hand-coded, rather than being able to use the rules language effectively.