A Sentinel policy blocks only real applies

The rule logic is stable, yet the helper sees a smaller resource set during plan than during apply once defaults expand into concrete instances.