Add Node/Express policy pack

[dburt-proex]

Add a Node/Express policy pack for common API risk areas.

Acceptance criteria:

• Add policy-packs/node-express.yml
• Protect auth/session/JWT middleware, route guards, package files, and workflow files
• Add one demo diff fixture

Why it matters: maps DiffWall to a common AI-generated-code target stack.