Gmail policy 9 uses MAY as crtiticality

[snarve]

🐛 Summary

Gmail policy 9.2 uses criticality MAY

Expected behavior

MAY as criticality will always pass the setting value in the report. This needs to updated.

[adhilto]

I'd recommend deleting 9.2 as a control and converting it to a note under 9.1. @jkaufman-mitre

[snarve]

Duplicate of #288