Merge checkpoint policy command

Bring the policy enforcement branch up to date with its stacked base.

Keep unsupported policy writes retryable during condensation and turn checkpoint finalization after the merge.