config/merge_policy: support bypass tokens

These may be provided through a trailer to allow a merge request to ignore the CI policy failures in specific instances.

Fixes: #91 (closed)