fix(epic): close-eligible --dry-run predicts close-policy refusals (GH #517 follow-up)

The real run refuses the whole batch when any eligible epic violates the
close policy, but --dry-run still listed every epic as "would close".
The dry run now evaluates the same policy: JSON/TOON rows gain
policy_summary and policy_violations for epics the policy would refuse
(omitted otherwise, so admitted rows are unchanged), and text output names
each refusal and states that nothing would be closed.

Test: e2e_epic_close_eligible_enforces_close_policy (dry-run assertions).

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>