Add policy for file ops. #13776

Job	Run time
check_if_release_branch	1s
check_if_release_branch	1s
changed_files	7s
changed_files	5s
towncrier_check	7s
towncrier_check	6s
build mirrord CLI	0s
build mirrord CLI	0s
test_agent_image	6m 12s
test_agent_image	6m 15s
lint	11m 11s
lint	3m 39s
integration_tests	13m 10s
integration_tests	13m 23s
macos_tests	30m 31s
macos_tests	24m 20s
test_agent	3m 16s
test_agent	3m 14s
test_cli_image	15m 12s
test_cli_image	17s
lint_markdown	0s
lint_markdown	0s
check-rust-docs	3m 53s
check-rust-docs	1m 12s
intellij_e2e_on_release_branch	0s
intellij_e2e_on_release_branch	0s
e2e (docker)	11m 52s
e2e (docker)	11m 36s
e2e (containerd)	11m 30s
e2e (containerd)	11m 19s
vscode_e2e_on_release_branch	0s
vscode_e2e_on_release_branch	0s
ci	1s
ci	1s
	3h 2m 31s

Provide feedback