fix: [nomad-step-2] S2-fix-G — strip trailing /* from all vault policy paths (systemic 403) (#951)

vault/policies/dispatcher.hcl

@@ -12,11 +12,11 @@
 # narrow runner-<NAME> policies, NOT this one. This policy stays bound
 # to the long-running dispatcher only.
 
-path "kv/data/disinto/runner" {
+path "kv/data/disinto/runner/*" {
   capabilities = ["read"]
 }
 
-path "kv/metadata/disinto/runner" {
+path "kv/metadata/disinto/runner/*" {
   capabilities = ["list", "read"]
 }