dhi: apply scout policy

[craig-osterhout]

Description

Updated DHI policy enforcement docs to use Docker Scout local policies.

Reworks the DHI "enforce image usage" topic to use the new docker scout policy local policy CLI with the hosted DHI policy bundle (dhi/policies:latest), instead of the dashboard-based policy workflow.

Changes:

• Rewrites dhi/how-to/policies.md around evaluating your own images against the DHI policy bundle via --policy-bundle, including a local build-and-evaluate example and a working GitHub Actions CI workflow.
• Reframes the topic to reflect what the bundle actually checks — DHI-grade security/compliance standards, not whether an image is a DHI.
• Adds a link to the policies repo (https://github.com/docker-hardened-images/policies) in DHI additional resources.
• Updates the how-to grid card to match.

https://deploy-preview-25564--docsdocker.netlify.app/dhi/how-to/policies/

Related issues or tickets

ENGDOCS-3346

Reviews

• Technical review
• Editorial review
• Product review

[netlify]

✅ Deploy Preview for docsdocker ready!

Name	Link
🔨 Latest commit	0d9d125
🔍 Latest deploy log	https://app.netlify.com/projects/docsdocker/deploys/6a56a69e93bbe60007f56b65
😎 Deploy Preview	https://deploy-preview-25564--docsdocker.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[docker-agent]

Assessment: 🟢 APPROVE

No significant issues found. One minor style note (hedge word) flagged as a low-severity suggestion.

[docker-agent]

Assessment: 🟢 APPROVE

The rewrite of content/manuals/dhi/how-to/policies.md is well-executed. Cross-references to ../../scout/policy/local.md resolve correctly, the GitHub Actions YAML is well-formed and uses valid inputs (policy-bundle, exit-code), no vendored or generated files are touched, and the page URL is unchanged so no redirect alias is needed. No high or medium issues found.

[docker-agent]

Assessment: 🟡 NEEDS ATTENTION

Rewrites the DHI policy enforcement topic around the new docker scout policy local CLI workflow. The overall structure is clear and the CI example is well-formed. A few items to check before merging.

[dvdksn]

LGTM