Update 'entity_id' typo in policy_store.go

[sakroutamine]

Description

Update default ceiling policy to use hyphen format to fix previous typo - https://hashicorp.atlassian.net/browse/VAULT-46123

The documentation for agent-registry already uses entity-id in web-unified-docs so no documentation was updated associated with this PR.

TODO only if you're a HashiCorp employee

• Backport Labels: If this fix needs to be backported, use the appropriate backport/ label that matches the desired release branch.
  • LTS: If this fixes a critical security vulnerability or severity 1 bug, it will also need to be backported to the current LTS versions of Vault. To ensure this, use all available enterprise labels.
• Jira: If this change has an associated Jira, it's referenced either in the PR description, commit message, or branch name.
• RFC: If this change has an associated RFC, please link it in the description.

PCI review checklist

• I have documented a clear reason for, and description of, the change I am making.
• If applicable, I've documented a plan to revert these changes if they require more than reverting the pull request.
• If applicable, I've documented the impact of any changes to security controls.

Examples of changes to security controls include using new access control methods, adding or removing logging pipelines, etc.

[vercel]

Deployment failed with the following error:

The `vercel.json` schema validation failed with the following message: should NOT have additional property `public`

Learn More: https://vercel.com/docs/concepts/projects/project-configuration

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
vault-ui	Error		Jun 24, 2026 3:06pm

[hashicorp-cla-app]

Thank you for your submission! We require that all contributors sign our Contributor License Agreement ("CLA") before we can accept the contribution. Read and sign the agreement

Learn more about why HashiCorp requires a CLA and what the CLA includes

---

0 out of 2 committers have signed the CLA.

• Amine Sakrout
• sakroutamine

---

Amine Sakrout seems not to be a GitHub user.
You need a GitHub account to be able to sign the CLA.
If you have already a GitHub account, please add the email address used for this commit to your account.

_{Have you signed the CLA already but the status is still pending? Recheck it.}

[github-actions]

CI Results - Go Tests: failed ❌
Failures:

Test Type	Package	Test	Logs
race	builtin/logical/database	TestBackend_StaticRole_Rotation_LockRegression	view test results
race	plugins/database/cassandra	TestSelfSignedCA	view test results
standard	plugins/database/cassandra	TestSelfSignedCA	view test results

[github-actions]

CI Results:
All Go tests succeeded! ✅