Add expiration stickiness to policies

[ezekg]

To control whether or not a license's expiry can "diverge" from its policy. Should have ATTACHED and DETACHED options, with the latter being the default, matching current behavior, and the former blocking updates to a license's expiry attribute across the board, and determining expiry based on (renewed_at || created_at) + policy.duration.