feat(api, web): implement policy mode management for agents and rules

- Added support for policy modes ('blacklist' and 'whitelist') in agent and policy set management.
- Updated API endpoints to handle policy mode during agent assignment and rule operations.
- Enhanced the web UI to display and manage policy modes for agents and rules, ensuring all assigned sets share a consistent mode.
- Introduced new validation to enforce single policy mode across assigned sets for agents.
- Improved error handling for policy mode conflicts and updated documentation accordingly.

Co-authored-by: Cursor <[email protected]>

apps/web/src/routes/_auth/rules/index.tsx

@@ -9,6 +9,7 @@ import { PageHeader, PageShell, ResourcePage } from '@/components/reui-kit'
 import { DataGridColumnHeader } from '@/components/reui/data-grid/data-grid-column-header'
 import { DataGridPrimaryCell } from '@/components/data-grid-cell'
 import { StatusBadge } from '@/components/status-badge'
+import { Badge } from '@/components/reui/badge'
 import { ConfirmDialog } from '@/components/confirm-dialog'
 import { policySetsQueryOptions } from '@/queries'
 import { apiFetch } from '@/lib/api'
@@ -142,6 +143,26 @@ function PolicySetsPage() {
           />
         ),
       },
+      {
+        accessorKey: 'policy_mode',
+        header: ({ column }) => (
+          <DataGridColumnHeader column={column} title="Режим" />
+        ),
+        cell: ({ row }) => (
+          <Badge
+            variant={
+              row.original.policy_mode === 'whitelist'
+                ? 'warning-light'
+                : 'secondary'
+            }
+            size="sm"
+          >
+            {row.original.policy_mode === 'whitelist'
+              ? 'whitelist'
+              : 'blacklist'}
+          </Badge>
+        ),
+      },
       {
         accessorKey: 'rules_count',
         header: ({ column }) => (