Cleanup policies

[amstrnad]

This takes a significant pass on cleaning up the policies, particularly the policies that are actually run in CI.

• as a convention, names in entities files now start with entities., so that when seen in the policy inits, it's clear where to find the definition
• many places that weren't specific about the expected tag are now more specific when the expected tag is known.
  • For example, policies that matched env == _ while never changing the env tag from {} now state env == {}
  • CSR tags still have to be _. See https://github.com/draperlaboratory/hope-pex-kernel/issues/36
• Many inits were not defined anywhere and have been removed
• Unused tags were removed from policies
• The policy tool automatically assumes env == _, code == _ if not specified in the rule, but I've added it back into the policies for clarity.
• Some whitespace cleanup