Split risk policy into its own navigation tab.

Move read-only risk control docs to /risk_policy before settings; keep transfers and exports on the settings page.

Co-authored-by: Cursor <cursoragent@cursor.com>

lib/common/static/instance_embed.js

@@ -11,6 +11,7 @@
     options: "/options",
     records: "/records",
     stats: "/stats",
+    risk_policy: "/risk_policy",
     settings: "/settings",
   };
 
@@ -242,9 +243,9 @@
   }
 
   function syncShellChrome(tab) {
-    const onSettings = tab === "settings";
+    const hideTopBar = tab === "settings" || tab === "risk_policy";
     document.querySelectorAll(".instance-top-bar").forEach((el) => {
-      el.hidden = onSettings;
+      el.hidden = hideTopBar;
     });
   }