[EnforceAuth] Update policy: POS Authorization

.github/actions/rego-lint/action.yml

@@ -29,12 +29,12 @@ runs:
         if [ -z "$FILES" ]; then
           echo "has_files=false" >> "$GITHUB_OUTPUT"
         else
-          DIRS=$(printf '%s\n' "$FILES" | while IFS= read -r f; do dirname "$f"; done | sort -u | tr '\n' ' ')
+          DIRS=$(printf '%s\n' "$FILES" | while IFS= read -r f; do dirname "$f"; done | sort -u | tr '\n' ' ' | sed 's/ *$//')
           echo "has_files=true" >> "$GITHUB_OUTPUT"
           echo "dirs=$DIRS" >> "$GITHUB_OUTPUT"
         fi
 
     - name: Lint changed Rego files
       if: steps.changed.outputs.has_files == 'true'
       shell: bash
-      run: regal lint "${{ steps.changed.outputs.dirs }}"
+      run: regal lint ${{ steps.changed.outputs.dirs }}

dev/store-ops/pos/authorization.rego

@@ -1,5 +1,5 @@
 # METADATA
-# title: POS Transaction Authorization
+# title: POS Authorization
 # description: Controls who can perform point-of-sale operations including sales, returns, voids, and manager overrides
 # related_resources:
 #   - ref: https://wiki.acmecorp.internal/retail-ops/pos-security