Org-policy overlay example

{
  "version": "1.0",
  "orgPolicyId": "acme-corp-ai-governance",
  "approvedScanRoots": [
    "~/Projects/acme",
    "/Users/Shared/acme-repos"
  ],
  "requiredSources": [
    "declared",
    "granted",
    "observed"
  ],
  "requiredCloudConnectors": [
    "github",
    "openai"
  ],
  "runtimeTelemetryRequired": false,
  "retentionDays": 90,
  "approvedGrantScopes": {
    "github": [
      "repo:read",
      "pull_requests:write"
    ],
    "openai": [
      "api.usage.read"
    ]
  }
}