Remind servers that they shouldn't overwrite signatures with those from a policy server (#2385)

* Remind servers that they shouldn't overwrite signatures with those from a policy server

* changelog

changelogs/server_server/newsfragments/2385.clarification

@@ -0,0 +1 @@
+Clarify that policy servers might share a name with event origins, and that servers should avoid overwriting/discarding signatures for the event origin when getting a policy server signature.

data/api/server-server/room_policy.yaml

@@ -41,6 +41,12 @@ paths:
 
         What the Policy Server checks for when calling this endpoint is left as an
         implementation detail.
+
+        {{% boxes/warning %}}
+        The policy server name might be the same as the event's origin, and therefore the event might
+        have existing signatures. Those existing signatures might not be returned by the policy server,
+        but should be retained to validate the event.
+        {{% /boxes/warning %}}
       operationId: askPolicyServerToSign
       security:
         - signedRequest: []