Builds the policy from what a launcher collected: the flag wins over the env twin, the override is only ever typed.
Flag, env, override.
The policy, or an error to print and refuse on.
Builds the policy from what a launcher collected: the flag wins over the env twin, the override is only ever typed.