Create a dependencies policy

[jasinner]

Create and publish a dependencies policy as specified in the 'A dependencies policy is published, maintained and followed.' entry of TAC Security Baseline