mod: Ext 17 — per-domain policy registry, 364/364

mod/register-policy! domain rules + mod/decide-in domain r reports give each
rose-ash domain its own rule set; unregistered domains fall back to default-rules
(never unmoderated). Same spam report → remove under a strict market policy, hide
under blog default. Engine already took rules as a param, so this is registry +
fallback, no engine change. +14 tests.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

lib/mod/conformance.conf

@@ -24,6 +24,7 @@ PRELOADS=(
   lib/mod/sla.sx
   lib/mod/wire.sx
   lib/mod/activity.sx
+  lib/mod/policies.sx
   lib/mod/lifecycle.sx
   lib/mod/audit.sx
   lib/mod/api.sx
@@ -51,4 +52,5 @@ SUITES=(
   "wire:lib/mod/tests/wire.sx:(mod-wire-tests-run!)"
   "disjunction:lib/mod/tests/disjunction.sx:(mod-disjunction-tests-run!)"
   "activity:lib/mod/tests/activity.sx:(mod-activity-tests-run!)"
+  "policies:lib/mod/tests/policies.sx:(mod-policies-tests-run!)"
 )