policies: add a non-clinical write policy (claims and back-office systems) #1809

policies/ has only clinical-write and permissive, so a claims or back-office system has to certify under clinical-write. Done when there is a general write policy for non-clinical systems of record, selected per app profile, with tests. Keep engine code app-agnostic. Found in the #1548 write-up (bug 12).