Add AppConfigPolicy REST v2 surface (POST /v2/app-config-policies/search, GET /v2/app-config-policies/{policy_id}, admin bulk-create / bulk-update / bulk-purge) — pairs with the GraphQL surface from BA-5815.