Introduce `policy.IngressRule` and `policy.EgressRule` to keep implementation details out of `policy/api`: - [ ] Move `api.IngressRule.aggregatedSelectors` and `api.EgressRule.aggregatedSelectors` to the new policy rules