Add Policy Author API spec

[janedotx]

See #496

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[schnuerle]

See the notes from the last WG call.

• Way to update policies - create/add, draft, and deactivate policy
• Providers could get early access to review, heads up beforehand, part of conversation (not written that way now)
• Adds scope and access control levels to changes
• Maybe useful, as is doesn’t have connection between providers and agencies
• Where should this live, in its own MDS Admin new repo? WGSC conversation.
• Sherie Tan San Jose - wants it to be fair to vendors, could be helpful to have a testing area for providers.
• Explore it's use on the vendor side. Dirk says it could be useful to them