sbx: update policy cli

[craig-osterhout]

Description

v0.35.0 revamps policy tooling with a new default output format for
sbx policy ls, a new sbx policy inspect command, and a new
sbx policy check network command for testing policy before running an agent.

Release notes: https://github.com/docker/sandboxes/releases/tag/v0.35.0

sbx policy ls now shows a concise one-row-per-policy overview by default.
Use --wide for the previous rule-level table (now including rule IDs),
--json for automation, and the new --source/--decision flags to filter.
Detailed inspection moved to the new sbx policy inspect <policy-or-rule>
command.

Upstream changes: docker/sandboxes#3733 (policy ls revamp + policy inspect),
docker/sandboxes#4018 (dhi.io HTTP in Balanced preset)

governance/monitoring.md

• Rewrites all sbx policy ls example output blocks to the new per-policy
  format (POLICY, SOURCE, APPLIES TO, SUMMARY columns)
• Rewrites column descriptions for the new schema
• Updates the org governance header from the old multi-line block format to the
  new single inline summary line
• Adds mentions of --wide, --source, --decision, and sbx policy inspect

governance/local.md

• Adds a new "Testing policy" section documenting sbx policy check network
  with examples for allowed and denied targets, URL inputs, and the
  --sandbox scope flag
• Updates the sbx policy ls reference to mention the new --source,
  --decision, and --wide filters and sbx policy inspect
• Notes the v0.35.0 Balanced preset additions: VS Code domains,
  *.blob.core.windows.net, and dhi.io over HTTP

Related issues or tickets

#25532: cli ref update

Reviews

• Technical review
• Editorial review
• Product review

[netlify]

✅ Deploy Preview for docsdocker ready!

Name	Link
🔨 Latest commit	2464d26
🔍 Latest deploy log	https://app.netlify.com/projects/docsdocker/deploys/6a512b3aa0323d0008981199
😎 Deploy Preview	https://deploy-preview-25535--docsdocker.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[docker-agent]

Assessment: 🟢 APPROVE

The documentation updates for sbx policy ls, sbx policy inspect, and sbx policy check network are well-written and internally consistent. No critical issues, missing redirects, vendored file edits, AI-isms, or incorrect commands were found.

Coverage: voice/tone ✅ · hedge words ✅ · bold usage ✅ · code block formatting ✅ · vendored files ✅ · redirects n/a (no pages removed) · command accuracy ✅

[docker-agent]

Assessment: 🟡 NEEDS ATTENTION