hide policy command during development
Commit

Keep the repo policy command invokable while removing it from help output until the surface is ready.
Add command-tree coverage so the hidden group remains callable through its checkpoint subcommand.
Entire-Checkpoint: 99b815203b44
Checkpoints
Checkpoint 1