devref policy: code is canonical source of truth for API

Although many reviewers know that documentation isn't the source of
truth for API behavior, we have never written this policy down before.

Change-Id: Ibe7b355947200b668324028972c121e5357a0470
Merge "devref policy: code is canonical source of truth for API"