feat(zhulan): add restricted remote development cell

server-tools/zhulan-remote-cell/policy.example.json

@@ -0,0 +1,41 @@
+{
+  "schema": "guanghu.zhulan-remote-cell-policy/v1",
+  "persona_id": "ICE-GL-ZL-001",
+  "node_id": "BS-SG-003",
+  "front_door": "https://guanghulab.com/zhulan/",
+  "default_ttl_seconds": 10800,
+  "max_ttl_seconds": 86400,
+  "max_request_paths": 24,
+  "max_changed_file_bytes": 20971520,
+  "max_read_file_bytes": 262144,
+  "workspace_root": "/srv/guanghu/zhulan-cell/workspaces",
+  "candidate_root": "/srv/guanghu/zhulan-cell/candidates",
+  "repository_base_url": "https://guanghulab.com/code/",
+  "allowed_actions": [
+    "read",
+    "edit",
+    "test",
+    "commit",
+    "push_candidate"
+  ],
+  "repositories": {
+    "bingshuo/guanghu-ice-heart": {
+      "candidate_branch_prefix": "zhulan/",
+      "allowed_path_prefixes": ["."],
+      "validation_commands": [
+        ["git", "diff", "--check"],
+        ["python3", "-m", "unittest", "discover", "-s", "server-tools/zhulan-remote-cell/tests", "-v"]
+      ]
+    },
+    "bingshuo/hololake-system-architecture": {
+      "candidate_branch_prefix": "zhulan/",
+      "allowed_path_prefixes": ["."],
+      "validation_commands": [["git", "diff", "--check"]]
+    },
+    "bingshuo/grok-build-upstream-mirror": {
+      "candidate_branch_prefix": "zhulan/",
+      "allowed_path_prefixes": ["."],
+      "validation_commands": [["git", "diff", "--check"]]
+    }
+  }
+}