[drew]

Summary

Add Cedar versions of the existing sandbox examples and let their demos select them with POLICY_FORMAT=cedar. This PR is stacked on #4565 so the example policies and workflows can be reviewed separately from the Cedar engine and runtime integration.

Related Issue

Closes #4990

Related: #4411. Depends on #4565.

Changes

• Add the Cedar policies, middleware configuration, and demo support under examples/.
• Include the fixture parity tests that compare the authored YAML and Cedar policies.
• Document how to select the Cedar examples in the example READMEs and Cedar guide.

Testing

• Cedar parity suite: 165 tests passed on this layer; 152 passed on the base without the example fixtures.
• Governance interceptor example: 35 tests passed on this layer; 33 passed on the base.
• Repository pre-commit checks passed for both commits, including formatting, lint, and lockfile checks.
• bash -n passed for the six changed demo/smoke scripts.

The combined stack's source tree is identical to #4565 before the split. Live demos and E2E scenarios were not rerun for the extraction.

Checklist

• Follows Conventional Commits
• Commits are signed off (DCO)
• Documentation accompanies the example workflows

[copy-pr-bot]

Auto-sync is disabled for draft pull requests in this repository. Workflows must be run manually.

Contributors can view more details about this message here.

[github-actions]

🌿 Preview your docs: https://nvidia-preview-pr-4991.docs.buildwithfern.com/openshell