[reinkrul]

Part of the Read the Docs → wiki move (stacked on #4676).

After review, deployment/policy.rst keeps its content (it explains how the feature works, not how to use it in a use case). Changes:

• link to the wiki page OAuth2 Scopes and Presentation Definition Mapping for designing a use case's policy
• the policy file format is now defined: per scope the organization, service_provider, user and scope_policy fields (profile-only, passthrough, dynamic), and the load rules (at least one PD, PD validated against the PE v2 schema, scope defined once, one profile scope per request)
• service_provider and user marked experimental (auth.experimental.jwtbearerclient; user only in the OpenID4VP authorization code flow, auth.authorizationendpoint.enabled), both default false
• two-VP warning: "experimental, under active development"

Fixed: the page described a presentation_definition object and a wallet_owner_type field, which don't exist; the scope holds organization, service_provider and user directly (policy/local.go). scope_policy was not documented.

Assisted by AI