Can ROM APKs self-update without violating Google Play policies?
No and no. In the first case, the app isn't downloaded from Google Play, it's downloaded from another source. In the second case, it's shipped with the ROM, and has no ties to Google Play. However, if you supply the APK via other means than Google Play, you can't use Google Play's update features.