Allow policy types to be grouped into package blocks.
Extract entity-level permissions into ApiDescription.
Remove most jsr-250 references.
Move EntityDescription into core to clean up TypeContext datastructures.