Quick addition: in practice everyone that I know uses Git + CI/CD for managing + deploying policy changes.