policies: verify remote policies exist during contract crafting

[jiparis]

Currently, policy attachments are not validated (other than plain protobuf validation). The goal is to perform a server-side validation for remote policies. This is: 1) parse contract for remote policies, 2) query providers to retrieve those policies, 3) validate they exist and are well-formed.