Govern agent output

Policy over what agent output is allowed to land: gate mode, severity thresholds, layer scoping, branch rules. Policies are versioned and immutable - every verdict in the audit trail records the policy version in force, so an auditor can always answer "what was the rule at the time." Org defaults apply everywhere; a repo policy overrides its org default.