policies: detect duplicated attachments and evaluations

[jiparis]

The goal is to avoid having duplicated policies in a contract, applied to the same materials/attestation.
The check could be done during contract crafting, but also at attestation time.
It should be valid for both local and remote policies.