Policy-based routing on the SVI forces user traffic toward a firewall but also bypasses the local DHCP relay path

Security steering works, but address assignment becomes unstable because a local service path was not exempted from the policy.