Booking Policies — API Contract Specification Endpoint GET /v1/policies/ PUT /v1/policies/ Single policy per company. Company context resolved from auth token — no ID in URL.