is there a way to get Pulumi to download any relevant security policies in advance? contest is I'm trying to build a Pulumi docker image with a Pulumi project to be run in CI/CD and I want to download/install all relevant providers and security policies as I can at build time so that it doesn't need to do it at run time. providers appear to get installed when the relevant npm modules are installed, but security policies only get downloaded when I run

pulumi up