a ContentPolicy is applied by an AgentVersion. Original plan also targeted Guardrail -> dropped per reviewer (no Guardrail NodeKind in v6).