Ignore Resources Policy: enhance to allow shading by VERB

Right now you can include only a regex for the paths you want to "hide". Increase the granularity by also including the verb, similar to how the Authorization policy works.

In other words, this policy should allow you to specify which HTTP verbs should be prevented. So for example you should be able to "hide" /user for PUT but not GET. This would allow a GET request for /user but it would fail for a PUT.

We should use the existing Authorization policy UI as inspiration for the enhanced UI for this.