[Governance follow-up] Move enforcement mode state onto evaluator or policy instance

Follow-up from #120.

Governance enforcement mode is currently stored as process-global runtime state. This can leak across multiple runtimes/jobs in the same Python process because the latest policy fetch wins globally.

Move the resolved enforcement mode onto the loaded policy/evaluator/runtime instance instead of module-level state.