Introduce Policy class to SCAPtimony model

This class allows for organization defined targeting. I.e. using
policies an organization may define mapping between the set of target
systems, SCAP content and time frame (period) to fullfill the audit.
Start packaging of DB migration scripts.