We should be using the `Link` from weave-gitops everywhere, or create our own that uses `isAllowedLink`. To make sure we don't accidentally introduce any more dangerous links into WGE.