POST /api/v1/policies

Status: stub. Day 3 deliverable.

Commits a DSL policy. Idempotent on dsl_hash — re-uploading identical bytes returns the existing version row.

The handler runs Athena (L1) lint server-side first; a policy that fails lint is rejected with 422 POLICY_INVALID and the full lint result attached.