Clash policy language: parsing, IR, compilation, and evaluation.
Extracted from clash::policy to break a circular dep with clash-lsp.
Policies are authored in Starlark and compiled to a uniform trie IR.
Evaluation is a single DFS pass — first match wins.