09. Policies & gates

Configure scan triggers and severity gates; understand PASSED / FAILED / SKIPPED.