feat(api): unify policy handling with default action updates

- Updated `evofw-firewall.sh` and related scripts to replace `policy_mode` with `default_action`, enhancing clarity and consistency in policy management.
- Adjusted agent routes and evaluation logic to accommodate the new default action structure, ensuring backward compatibility with legacy modes.
- Enhanced tests to validate the new default action behavior and its integration within the agent policy framework.
- Refactored related components in the web interface to align with the updated policy handling, improving user experience and reducing confusion around policy modes.

apps/api/src/services/install-links.test.ts

@@ -186,12 +186,16 @@ describe('install-links', () => {
     const body = policy.json() as {
       deny_cidrs: string[]
       allow_cidrs: string[]
+      default_action: string
       policy_mode: string
+      apply_version: number
       hash: string
     }
     expect(body.deny_cidrs).toEqual([])
     expect(body.allow_cidrs).toEqual([])
+    expect(body.default_action).toBe('accept')
     expect(body.policy_mode).toBe('blacklist')
+    expect(body.apply_version).toBe(2)
     expect(body.hash).toMatch(/^sha256:/)
 
     const agents = await app.inject({ method: 'GET', url: '/api/v1/agents' })