Implement deterministic policy modules

[wauputr4]

Goal

Move critical safety and business rules into deterministic policy modules instead of relying only on prompts.

Scope

• Implement MemoryPolicy.
• Implement OwnerNotificationPolicy.
• Implement SkillApprovalPolicy.
• Implement HandoffPolicy.
• Ensure policy decisions can be tested without running CrewAI.

References

• docs/16-operational-policies.md
• docs/22-architecture-boundaries.md
• docs/21-skills-and-execution.md

Acceptance Criteria

• Memory writes are blocked when they include raw transcripts, secrets, or unsupported assumptions.
• Owner notification decisions can be triggered by high-risk cases.
• Approval-required skills do not execute automatically.
• Handoff/escalation decisions are testable from deterministic inputs.