补充 OSS 验证策略配置示例

examples/config/README.md

@@ -9,6 +9,7 @@ also needs a valid, matching ripe.cer. No live inputs are bundled here.
 | --- | --- |
 | [validate-minimal.toml](validate-minimal.toml) | Minimal automatic TA; built-in defaults |
 | [validate-full.toml](validate-full.toml) | Common/validate settings, strict completion, successful publication |
+| [validate-policy.toml](validate-policy.toml) | All validation-policy, validation-time and RRDP/rsync transport settings |
 | [validate-fixed.toml](validate-fixed.toml) | Fixed TA certificate |
 | [validate-localhost.toml](validate-localhost.toml) | Generated localhost HTTPS repository with an explicit HTTP CA |
 | [daemon-all5.toml](daemon-all5.toml) | Five automatic TAs, continuous operation |
@@ -32,6 +33,11 @@ Full/daemon examples explicitly choose require-complete=true and
 run-timeout-secs=1800; built-in defaults are false and 0. Use the
 [Docker examples](../../docker/examples/README.md) for container paths.
 
+`validate-policy.toml` is an additive configuration showcase. The existing
+examples intentionally omit the optional policy/transport keys and therefore
+continue to use their documented built-in defaults; they do not need to be
+changed for this iteration.
+
 ## Local HTTPS test repository
 
 `validate-localhost.toml` is a runnable example for the generated repository