Counterintuitively, @jsha has taught me if you control the CAA DNS record for the subdomain, you can create a more-specific record that overrides this policy:
However, you might get in trouble with Oracle's IT department if you do this without coordinating with them, because perhaps they intend for the policy to apply to subdomains by default or want to centrally track the issuance of certificates for Oracle subomains.