Document input.action_type in Rego approval-policy reference (tracks kubernaut#247)

[jordigilh]

Background

jordigilh/kubernaut added a new input.action_type field to the AIAnalysis Rego approval-policy input schema (tracks kubernaut#247, documented as BR-AI-085 FR-AI-085-006). This enables approval policies to require human approval for infrastructure-provisioning action types (e.g. ProvisionNode), independent of input.remediation_target.kind (which reflects the LLM-observed source workload, not necessarily the infrastructure being provisioned).

Request

docs/user-guide/rego-reference.md documents the full input.* schema (currently including input.remediation_target.*, e.g. lines ~309-312) and example policies. Please add:

1. A new row to the input-schema table for input.action_type (string, the catalog action type selected for remediation, e.g. ScaleReplicas, ProvisionNode).
2. An example policy showing an is_infrastructure_action rule gating on input.action_type == "ProvisionNode", mirroring how is_sensitive_resource (kind-based) is already documented.

References

• kubernaut#247 (the code change)
• kubernaut docs/requirements/BR-AI-085-rego-policy-input-schema.md, FR-AI-085-006 (the schema/rule addition)