'deny == false' should be evaluated first before calling allow_access()

[kd-labs]

opa-bundle-api/pkg/bundle/static/rule.rego

Line 19 in 2d83bcd

deny == false

First 'deny' is evaluated. Then when evaluating 'allow' we can use the value of deny already computed as an early escape clause so as to avoid calling allow_access() when deny is false

Therefore, 'deny==false' should be moved to line 17