Block updates that are flagged by VirusTotal

Block automatic updates in Production when a file is marked as suspicous from one of the vriustotal engines.

Today I can configure my Liquit Setup Store connector to sync package updates directly into the production ring. This is desirable for applications that typically would run in an auto update mode that does not require testing or QA (akin Google Chrome updates). If an application update has been flagged as suspicious, it would help a lot to block this update from syncing to production automatically, until an administrator is able to review the block and consider publishing it anyway (for false positives). We can see in our notification emails if virustotal has flagged an update but at that point in time, some installations might have already received the update through Liquit.