Simple security layer for GitLab Runner using a pre-build hook to restrict which users and projects are allowed to run CI jobs.
The runner will fetch a remote allowlist configuration and validate:
GITLAB_USER_IDCI_PROJECT_ID
If the user or project is not listed, the job will fail immediately before the build starts.