v0.60.0

Approval policies now have a home in the UI. The policy engine has enforced from the API since v0.58.0, holding a matching run for approval so the gate cannot be skipped. This release makes those rules visible and editable in the product.

• A new admin-only Policies page under Access lists every rule and lets you create, edit in place, and delete.
• Each rule shows its tool, the command substring it matches, the target inventory, and whether dry runs are skipped. An empty field reads as any, so the width of a rule is clear at a glance.
• Editing a policy keeps its original creation time, and the list has the same search filter as the other pages.

This completes the governance story: tamper-evident audit, an enforced approval gate, and policy rules you can manage without touching the API.