WIP Create data-policies.xml

still missing ATLAS as there's no okay yet, addressing #515 
> I don't see the point of having the same information in 2 different fields 

The `FFT` field is only seen by the system, not the user.  So this would not really be a duplication. If we have only `FFT`, then after the upload of the record, the original location is "unknown" to the user.  While it may contain further information and/or links that we may want to show perhaps.  

Otherwise I'm perfectly fine with serving files only from the portal; I only wanted to alert on this "lack of source" from the visibility point of view of a regular end-user.