Derive missing-policy defaults from the canonical owner

When a policy row is missing, derive its default from the canonical policy owner rather than reimplementing fallback logic in each consumer. A local normalization can silently fork scope or authority from the system's intended default. Test the missing-row case against the canonical helper and keep one owner for the rule.