Include an ISO lastUpdated timestamp in policy API responses

This way we can drive automations based on this value.

I see that it's included in the content field, but it's in a human readable format, and why bother parsing?