town.muni.arbiter.resetPolicy

Reset a stewarded arbiter's root policy. The caller authenticates via serviceAuth (aud = arbiter-server DID, lxm = town.muni.arbiter.resetPolicy). Only the account designated in the arbiter's `town.muni.arbiter.recovery/self` record (the recovery admin) may reset the policy. The replacement Rego source is written to `town.muni.arbiter.policy.root/self` and the arbiter is re-onboarded. If no recovery admin is set, this endpoint is unavailable (forbidden).