Prevent creating namespaces/orgs on pushes (CREATE_NAMESPACE_ON_PUSH) if user is restricted. Also updates RESTRICTED_USERS_WHITELIST to defaults to all if not set, given that FEATURE_RESTRICTED_USERS is set.