Draft capability entry (reuse-surface REUSE-WP-0017-T04, cohort 2)

Honest first-pass maturity vector grounded in README/docs/tests present
in this repo; no invented evidence. Flagged for human review before
publish. See reuse-surface history/2026-07-06-coverage-classification.md.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

registry/indexes/capabilities.yaml

@@ -1,4 +1,21 @@
 version: 1
-updated: '2026-06-16'
+updated: '2026-07-06'
 domain: helix_forge
-capabilities: []
+capabilities:
+- id: capability.iam.key-cape
+  name: KeyCape Lightweight IAM (NetKingdom Profile)
+  summary: Lightweight-mode implementation of the NetKingdom IAM Profile (versioned OIDC/PKCE contract),
+    orchestrating Authelia, LLDAP, and privacyIDEA so applications integrate against the profile, not
+    against implementation internals.
+  vector: D4 / A2 / C2 / R1
+  domain: infotech
+  status: draft
+  owner: key-cape
+  path: registry/capabilities/capability.iam.key-cape.md
+  tags:
+  - iam
+  - oidc
+  - netkingdom
+  - security
+  consumption_modes:
+  - service (self-hosted deployment)