* Add policy engine to web4-governance (Tier 1.5)
Configurable rule-based pre-action gating via before_tool_call hook.
Rules match by tool name, category, and target pattern (glob/regex).
Decisions (allow/deny/warn) enforced or dry-run, recorded in R6 constraints.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* Add policy admin CLI: status, rules, test commands
* Add README and update ARCHITECTURE.md for Tier 1.5 policy engine
---------
Co-authored-by: dp-web4 <dp@metalinxx.io>
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
