v5.1.0 — enforce org policy
Reusable workflow apm-audit.yml now explicitly runs apm audit --ci --policy org after install. v5.0.x only generated SARIF (drift-only); policy violations passed CI silently. Consumers bump to @v5.1.0 to actually gate on org policy.