You can restrict the rooms being shown by checking the association exists between the room and customer. You can do this through XPath:
Likewise, you can use decisions in a microflow to check if the customer is booked into a room:
You can then add the appropriate alerts/messages if a customer is already associated with a room.
Hope this helps,