Manual vs. AI: Striking the Right Balance in ISO 27001 Policy Drafting