Release: v1.0.0-beta.18

[jonathunne]

• Bump version to 1.0.0-beta.18

Changes since v1.0.0-beta.17

• fix(policy): make the catch-all snippet valid and name the blocked operation
• test(policy): tighten the denial-code tests
• docs(policy): tighten the JSDoc added by this PR
• refactor(policy): drop the DENIAL_CODES freeze and tidy the review follow-up
• fix(policy): carry the denial code through simulate, freeze and export DENIAL_CODES
• feat(policy): hint at catch-all pattern in no-match PolicyViolationError

Dependency updates

• None (version-only release)