Add gatekeeper job for cf-deployment

[cweibel]

Changes proposed in this pull request:

• Add gatekeeper job for cf-deployment, the job has a weekly timer so cf-deployment is only pulled down once a week to give upstream a bit of time to burn in. It should also help keep changes to deploy-cf and other resources from getting mixed in as easily with cf-deployment new versions, making it easier to flush certs and other configuration changes.
• This is a "see if it helps", if not, it can easily be removed.
• Part of https://github.com/cloud-gov/product/issues/2836

security considerations

This only delays when the cf-deployment upstream resource is sucked in.