Policy-Aware Generative AI for Safe, Auditable Data Access Governance