feat(policies): backend-driven policy enforcement (frontend) (#6598)

## Summary
Adds the **Policies** feature (proprietary, behind the
`POLICIES_ENABLED` flag): backend-driven enforcement that runs a fixed
tool pipeline on documents, docked in the right tool sidebar alongside
Tools.

## Highlights
- **Policy catalog** — 5 categories; **Security** is wired (redact PII +
sanitize), the others are marked "Coming soon".
- **Backend as source of truth** — policies persist via the Policies
engine (`/api/v1/policies`), one policy per category, with a local cache
+ offline fallback.
- **Auto-run** — enabled policies run on every uploaded file: dispatch →
poll → import outputs into the workspace.
- **Security redact config** — PII preset dropdown + custom word/regex
entry + advanced options; tool params map to the backend endpoint
fields.
- **Activity feed** with retry on failures; **file badges** showing
which policies ran on a file (sidebar + files page), tinted to the
policy colour.
- Reuses the **Watched Folders** engine for each policy's backing
folder; policy-owned folders are filtered out of the Watched Folders UI.

## Notes
- Gated by `POLICIES_ENABLED` (true in proprietary, false in core) —
unreachable in the open-source build.
- Frontend-only diff; depends on the backend Policies engine and the
merged Watched Folders feature.

frontend/editor/vitest.config.ts

@@ -1,6 +1,12 @@
 import { defineConfig } from "vitest/config";
 import react from "@vitejs/plugin-react-swc";
 import tsconfigPaths from "vite-tsconfig-paths";
+import path from "node:path";
+
+// Global @shared alias so SUI components (and their own `@shared/*` self-imports,
+// which live outside the editor tsconfig scope) resolve under test — mirrors the
+// resolve.alias in vite.config.ts.
+const sharedDir = path.resolve(__dirname, "../shared");
 
 export default defineConfig({
   test: {
@@ -42,6 +48,9 @@ export default defineConfig({
             projects: ["./tsconfig.core.vite.json"],
           }),
         ],
+        resolve: {
+          alias: { "@shared": sharedDir },
+        },
         esbuild: {
           target: "es2020",
         },
@@ -60,6 +69,9 @@ export default defineConfig({
             projects: ["./tsconfig.proprietary.vite.json"],
           }),
         ],
+        resolve: {
+          alias: { "@shared": sharedDir },
+        },
         esbuild: {
           target: "es2020",
         },
@@ -78,6 +90,9 @@ export default defineConfig({
             projects: ["./tsconfig.desktop.vite.json"],
           }),
         ],
+        resolve: {
+          alias: { "@shared": sharedDir },
+        },
         esbuild: {
           target: "es2020",
         },
@@ -96,6 +111,9 @@ export default defineConfig({
             projects: ["./tsconfig.saas.vite.json"],
           }),
         ],
+        resolve: {
+          alias: { "@shared": sharedDir },
+        },
         esbuild: {
           target: "es2020",
         },
@@ -114,6 +132,9 @@ export default defineConfig({
             projects: ["./tsconfig.prototypes.vite.json"],
           }),
         ],
+        resolve: {
+          alias: { "@shared": sharedDir },
+        },
         esbuild: {
           target: "es2020",
         },