Activate NK-WP-0009/0011; add tutorials slice and proposed ADR-0009

- docs/tutorials: template, OpenBao and SSH tutorials (unexercised)
- tools/tutorial-verify + make tutorials-verify (NK-WP-0009-T06)
- ADR-0009 proposed: expanded-mode Keycloak trigger and topology

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: sonnet
Assistant-Process: 295952@bnt-lap001
Assistant-Session: e93f64ad-516c-46eb-9666-aad8d300c477

workplans/NK-WP-0009-netkingdom-security-pattern-tutorials.md

@@ -68,7 +68,7 @@ Out of scope:
 
 ```task
 id: NK-WP-0009-T01
-status: todo
+status: done
 priority: high
 state_hub_task_id: "3c6824a0-39e6-51f5-b46f-5861a9375439"
 ```
@@ -95,7 +95,7 @@ configuration.
 
 ```task
 id: NK-WP-0009-T03
-status: todo
+status: progress
 priority: high
 state_hub_task_id: "16cf51a4-0763-59e9-9b4c-d486f5bde908"
 ```
@@ -109,7 +109,7 @@ integration, leases, unseal, backup, and break-glass.
 
 ```task
 id: NK-WP-0009-T04
-status: todo
+status: progress
 priority: medium
 state_hub_task_id: "1d28e3f1-fb39-5d0e-a7ee-ce2e9bc16ed5"
 ```
@@ -135,7 +135,7 @@ decision envelopes, and delegated PDP options.
 
 ```task
 id: NK-WP-0009-T06
-status: todo
+status: done
 priority: medium
 state_hub_task_id: "5b6a1670-a283-56e9-892e-ef8b91194a7b"
 ```

workplans/NK-WP-0011-enterprise-federation-saml.md

@@ -117,7 +117,7 @@ Out of scope:
 ```task
 id: NK-WP-0011-T01
 state_hub_task_id: "a5807808-fb34-50de-8f67-9128011833d4"
-status: todo
+status: progress
 priority: high
 ```