not all policies are categorized as BSI

Some policies (i.e. image-registries) is not in category BSI. We should

1. Check that this is the case for all manual and automated policies
2. Do this programatically with the creation script