plan: mark Scaleway bootstrap lane built with placeholders

Empty-structure plus xxx example fields. Founder replaces values
in the OpenBao UI before any bucket create.

plans/reef-storage-scaleway-bootstrap.md

@@ -3,9 +3,9 @@ id: reef-storage-scaleway-bootstrap
 demand_source: resource-control/workplans/RESOURCE-WP-0002-T03
 consumer_repo: reef-storage
 credential_type: openbao-kv-founder-provision
-status: reviewed
-approved_by: null
-approved_at: null
+status: built
+approved_by: "Bernd Worsch"
+approved_at: "2026-08-14"
 created: "2026-08-14"
 updated: "2026-08-14"
 ---
@@ -124,4 +124,21 @@ handle the Terraform secret values.
 
 ## 6. Build result
 
-Not executed. Waiting on phase-3 approval of this plan.
+Executed 2026-08-14 after founder asked to bootstrap with example
+data and replace values in the OpenBao UI.
+
+Created (structure + placeholders only; values are the string `xxx`):
+
+- policy `operator-kv-scaleway-bootstrap` (read/write that one path)
+- KV v2 `platform/workloads/railiance/scaleway/bootstrap` version 1
+  fields `ACCESS_KEY`, `SECRET_KEY`, `DEFAULT_ORGANIZATION_ID`,
+  `DEFAULT_PROJECT_ID`
+- custom_metadata `placeholder=true`, `ccr=CCR-2026-0011`,
+  `replace_in_ui=true`
+
+Catalog draft `scaleway-bootstrap` already proposed.
+
+**Founder next:** OpenBao UI → secret
+`platform/workloads/railiance/scaleway/bootstrap` → create version 2
+with the real Terraform values. Then say “bootstrap is in OpenBao.”
+The bucket-create script refuses `xxx` placeholders.