Turn the policy PDF into an enforced rule

Shows security-as-code as a concrete practice — an OPA/Rego policy replacing a wiki page nobody reads, enforced automatically on every change.