Policy console

Define, version, simulate, and enforce the rules the proxy pipeline applies. Governance is the write surface — it sets parameters on the BUILT AgentCop + PolicyGate, it does not reimplement them. Simulate runs against historical Monitoring data via the same query path, so the numbers reconcile.