policies: detect duplicated attachments and evaluations

[jiparis]

The goal is to avoid having duplicated policies in a contract, applied to the same materials/attestation. The check could be done during contract crafting, but also at attestation time. It should be valid for both local and remote policies.