Posts in index now filtered by Pundit policy.

Policy itself had Scope class enclosed per docs. This was the missing
bit that somehow hadn't filtered in the first dozen times I read the
doc.

RSpec: 841 examples, 0 failures (but see Issue #87)
RuboCop: 161 files inspected, no offenses detected