Policy packs

Topic rules + refusals.

A policy pack collects the topic allow/block lists, refusal templates, escalation rules, and an optional confidence threshold override. Assign one to each agent that needs guardrails. Topic rules match as plain substrings (case insensitive) for now.