feat(core): `AnyElement` / `NoElement` conditions with an explicit `not` clause flag

List quantifiers other than "all". Take a list of clauses {path, type, value, not}: the not
flag is load-bearing because Not* twins exist for only 3 of 13 conditions and are documented as
"not simple negations" — inside a NoElement predicate that asymmetry reports a resource compliant
on a type mismatch. The flag gives negation for all 13 conditions at once and supersedes a
standalone NotRegexMatch (measured at ~1 unlocked policy on its own). Document that nested
blocks need settings.*.database_flags (the bare dotted form emits severity 2) and that predicate
sub-paths use a different path engine than terraform_resource_attribute. Depends on the R1
skip-ordering and variable-recursion fixes.

Start by locating the existing "all" list-quantifier implementation and the standalone NotRegexMatch condition, then review the R1 skip-ordering and variable-recursion fixes this depends on. The change is done when AnyElement and NoElement accept clauses with an explicit not flag across all 13 conditions, with the documented database_flags and predicate path-engine behavior.