Merge branch 'add-note-about-pipeline-execution-strategy-precedence' into 'master'

Add note about pipeline execution policy strategy

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/158879



Merged-by: Russell Dickenson <rdickenson@gitlab.com>
Approved-by: Martin Čavoj <mcavoj@gitlab.com>
Approved-by: Russell Dickenson <rdickenson@gitlab.com>
Reviewed-by: Martin Čavoj <mcavoj@gitlab.com>
Co-authored-by: Andy Soiron <asoiron@gitlab.com>

doc/user/application_security/policies/pipeline_execution_policies.md

@@ -57,6 +57,7 @@ Note the following:
 - Injecting jobs in any of the reserved stages is guaranteed to always work. Execution policy jobs can also be assigned to any standard (build, test, deploy) or user-declared stages. However, in this case, the jobs may be ignored depending on the project pipeline configuration.
 - It is not possible to assign jobs to reserved stages outside of a pipeline execution policy.
 - The `override_project_ci` strategy will not override other security policy configurations.
+- The `override_project_ci` strategy takes precedence over other policies using the `inject` strategy. If any policy with `override_project_ci` applies, the project CI configuration will be ignored.
 - You should choose unique job names for pipeline execution policies. Some CI/CD configurations are based on job names and it can lead to unwanted results if a job exists multiple times in the same pipeline. The `needs` keyword, for example makes one job dependent on another. In case of multiple jobs with the same name, it will randomly depend on one of them.
 
 ### Job naming best practice