feat: support run-based assignments in can-redeem; ensure assigned policies have highest priority

feat: support run-based assignments in can-redeem; ensure assigned policies have highest priority #1604