Allow Policies Attached to Modules to Run on Stacks that Use Them

We would like policies, such as plan or approval, that are attached to modules to have the option to be run/evaluated on stacks that use them.

You can attach policies to stacks via labels but our internal users can specify their own labels and using autoattach:* feels clunky here. We are looking to gate specific modules with security or devops approval specifically without interfering with the end user flow much at all.