Extended type checking of system.* policies

[anderseknert]

This is an improvement that will be incorporated in OPA soon. However, the check in OPA will be at runtime and not be done by e.g. opa eval. For that reason it seems like it would make for a good linter rule, so that people are able to catch this at build time using Regal.