pub const fn policy_action(mode: PolicyMode) -> &'static str
A short, stable label for logs / MCP responses.