Migration Plan Sketch

RulesURL copied

1. plan stores intent, not output file syntax

2. plan groups related source policies into target units

3. plan records relationships like sequence, dependencies, and role

4. renderers consume plan and emit files