Socotra connectivity check

Fetches a policy through ReviewAPI, which owns the Socotra credentials and the round-trip to it. So this checks two hops: the portal reaching ReviewAPI, and ReviewAPI reaching Socotra. Not an underwriting screen.