Limit dependencies to use in Qiskit Functions

[pacomf]

What is the expected behavior?

We need a way to configure in Serverless the dependencies to use (like a white list or black list, think about it), to restrict in someway external libraries to install and use it. Even it can be great if we can restrict access to external APIs, IPs or services (following the same approach with white list or black list).

It is a open question... think about it and design a proposal that can fit with that idea.

[IceKhan13]

we can simply have list of backlisted packages and check them agains dependencies argument in Program

[psschwei]

A framework for this was implemented in #1443
Further work needs to be done to implement the full range of requirement specifiers in https://peps.python.org/pep-0508/
Then someone also has to come up with what we want to allowlist