1. Yes. You'd need to map the customer ID to a topic, or load all the policies to all clients and have your Rego code do the sorting. If you don't want to use a policy repository you can use an API bundle server instead
2. You can have each client/ OPA instance have a different subset of data with OPAL topics or scopes.