KIP-686 — API to ensure Records policy on the broker

Discussion BrokerSecurity

Adds a broker-side `RecordsPolicy` plugin interface that intercepts produce requests and can reject records that do not conform to a required schema or format. Client-side SerDe enforcement is insufficient because any client can write arbitrary bytes; enforcing data format at the broker is the only way to guarantee schema compliance across all producers.

Details