const POLICY_ENV_VAR: &str = "CONTAINERS_POLICY_JSON";
The env var that overrides the policy path, matching the upstream Go containers/image library behavior.