An option to disable YT calls inside DQ (#7430)

Author: vitstn

ydb/library/yql/providers/dq/config/config.proto

@@ -124,6 +124,7 @@ message TDqConfig {
         optional bool EnforceJobUtc = 33;
         optional TSpillingSettings SpillingSettings = 38;
         optional TDiskRequest DiskRequest = 39;
+        optional bool EnforceJobYtIsolation = 40;
     }
 
     repeated TYtBackend YtBackends = 5;

ydb/library/yql/tools/dq/worker_job/dq_worker.cpp

@@ -237,6 +237,9 @@ namespace NYql::NDq::NWorker {
         if (backendConfig.GetEnforceJobUtc()) {
             pfOptions.Env["TZ"] = "UTC0";
         }
+        if (backendConfig.GetEnforceJobYtIsolation()) {
+            pfOptions.Env["YT_ALLOW_HTTP_REQUESTS_TO_YT_FROM_JOB"] = "0";
+        }
         pfOptions.EnablePorto = backendConfig.GetEnablePorto() == "isolate";
         pfOptions.PortoLayer = backendConfig.GetPortoLayer().size() == 0 ? "" : layerDir;
         pfOptions.MaxProcesses = capacity*1.5;