Add policy for file ops. (#2997) #13789

Job	Run time
check_if_release_branch	1s
towncrier_check	7s
changed_files	6s
build mirrord CLI	0s
check-rust-docs	4m 30s
test_agent_image	6m 26s
integration_tests	14m 51s
macos_tests	34m 5s
lint	12m 33s
test_agent	3m 11s
test_cli_image	15m 15s
lint_markdown	0s
e2e (docker)	11m 51s
e2e (containerd)	13m 11s
vscode_e2e_on_release_branch	0s
intellij_e2e_on_release_branch	0s
ci	1s
	1h 56m 8s

Provide feedback