Simulate runtime policy outcomes for agent actions using risk, context, permission, and approval rules