AZ608: A tree swapped in that wasn't built

Two-phase migrations build a changed tree beside the one in use, then swap it in. The second one ran without the first: apply the migration before it.

Reported when a policy migration runs.