config/schema: support allowed_values annotation

The annotation allows to restrict values accepted by a schema node. It
effectively implements a enumeration type.

Part of #8725

NO_DOC=the module is for internal use from the config code
NO_CHANGELOG=see NO_DOC