A single merchant-configured policy entry. A policy is considered configured only when link is a non-empty URL. The wrapping object lets us extend the shape later (e.g., display name) without breaking existing consumers.