fix(spec, lint): state the RLS check default per operation across the applicable policies, as the runtime applies it

fix(spec, lint): state the RLS check default per operation across the applicable policies, as the runtime applies it #28043