补充 OSS 验证策略配置示例

docker/examples/README.md

@@ -9,6 +9,7 @@ startup, graceful stop and config reload.
 | validate.toml | Single run | /input/anchor.tal |
 | validate-all5.toml | Single run | Five named RIR TALs and constraints |
 | validate-localhost.toml | Single run | Generated localhost HTTPS repository and `/fixture/certs/rrdp-ca.pem` |
+| validate-policy.toml | Single run | Complete validation-policy and RRDP/rsync TOML settings |
 | daemon.toml | Continuous | /input/anchor.tal |
 | daemon-all5.toml | Continuous | Five named RIR TALs and constraints |
 
@@ -29,6 +30,10 @@ The all5 examples explicitly enable TA constraints. Copy `tals/*.tal` and
 or set top-level `ta-constraints-enabled = false` to disable all policies,
 including same-stem file discovery. See [provenance](../../tals/README.md).
 
+`validate-policy.toml` is an additive configuration showcase. The existing
+container examples intentionally omit the optional policy/transport keys and
+continue to use their documented defaults; they do not need to be changed.
+
 ## Local HTTPS test repository
 
 `validate-localhost.toml` explicitly sets `http-root-cert` to the CA generated