Do conftest policy checks run automatically as part of an

apply

step, or do they only run at the end of a

plan

step? Like if I had a no-friday-deploys policy, and someone runs

atlantis plan

on Thursday, then the policy would pass. And if they come back to their PR again on Friday and run

atlantis apply

, will that apply proceed or will conftest run again and fail before the apply begins?