Basic understanding should be that rules are working in the order they are listed, i.e. top listed superseding any following rule.
Plus that the VPN is not controlling the routing or else policy routing will have no effect.
As far as I can discern from this thread you only want the guest ip range to be routed via VPN and thus it would require only one
