update policy markdowns

samples/DisallowNewCapabilities.md

@@ -15,6 +15,8 @@ apiVersion: kyverno.io/v1
 kind: ClusterPolicy
 metadata:
   name: disallow-new-capabilities
+  annotations:
+    pod-policies.kyverno.io/autogen-controllers: none
 spec:
   rules:
   - name: validate-add-capabilities

samples/DisallowRootUser.md

@@ -28,8 +28,15 @@ spec:
       - spec:
           securityContext:
             runAsNonRoot: true
+      - spec:
+          securityContext:
+            runAsUser: ">0"
       - spec:
           containers:
           - securityContext:
               runAsNonRoot: true
+      - spec:
+          containers:
+          - securityContext:
+              runAsUser: ">0"
 ````