The `setResourcePolicyRules` endpoint was deleting all existing rules and
re-inserting them on every save, causing all ruleIDs to change.
Backend: Accept an optional `ruleId` per rule in the request body and
perform an upsert — update existing rules (matched by ruleId), insert
new ones (no ruleId), and delete only rules absent from the incoming list.
Frontend: Include `ruleId` in the rules payload for existing (non-new)
rules so the backend can match and preserve them.
5428bf4ed0