Enforcing Datalog Policies with Service Automata on Distributed Version Control Systems