Add "disposition" attribute to SecurityPolicyViolationEvent

[shekyan]

There is no direct way to programmatically tell if violated policy is enforced or report-only.
Expose disposition of violated policy to the SecurityPolicyViolationEvent, with a value equal to "report" or "enforce".

[mikewest]

Closed in 4b6de30.