feat(cloud): enforce host governance budgets

apps/device-host-agent/host_agent/app.py

@@ -19,6 +19,7 @@ from host_agent.history import ConsoleHistoryStore
 from host_agent.identity import HostIdentityStore
 from host_agent.lease import ActiveAssignmentRunner
 from host_agent.local_account import LocalAccountStore
+from host_agent.policy_cache import HostPolicyCacheStore
 from host_agent.processor import AssignmentProcessingResult, AssignmentProcessor
 from host_agent.status import AgentStatusTracker
 from host_agent.web.app import create_console_app
@@ -195,6 +196,14 @@ def create_application(
             if history_store is not None
             else None
         ),
+        policy_cache=HostPolicyCacheStore(
+            resolved_config.identity_path.parent / "host_governance_policy.json"
+        ),
+        on_policy_sync=(
+            (lambda revision: history_store.record_policy_sync(revision=revision))
+            if history_store is not None
+            else None
+        ),
     )
     executor = AssignmentExecutor(
         create_execution_factories(