Enforces GrantForge policies in Redis and Valkey with their own ACL: a service beside the deployment that keeps,
on every node of a cluster or replicated deployment, each user's ACL selectors holding exactly what the service's
signed policies give the user, replaced in one command when they change. It grants key and channel patterns only
where every policy decides alike, asks Redis itself with ACL DRYRUN what permissions outside GrantForge allow, and
reports ...