How are people adding custom checks into their pulumi programs. For instance after deploying a k8s resource that has a CRD.