use empty policy flag values to unset

Treat provided empty checkpoint policy flag values as field removal.

This keeps the command surface smaller while preserving the ability to distinguish omitted flags from explicit empty values.