address checkpoint policy review feedback

Keep resume usable when a squash commit lists an older unsupported checkpoint before a readable one, while preserving unsupported-version failures when no readable checkpoint remains.

Silence policy command cancellation and use the safe update instruction for checkpoint policy upgrade warnings.