Route OpenBao configuration and provisioning away from the structure survey

Configuration intent (policies, auth roles) routes to the attended
openbao-platform-admin-login lane and value provisioning to openbao-api-key
custody; both fail closed when their front door is missing. The survey lane
now points at ops-mason's read-only ops-mason-survey grant (MASON-IN-0004).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327285@bnt-lap001
Assistant-Session: d6532cd1-7cd5-417b-baac-b841c9103a6b

tests/test_proxy.py

@@ -652,6 +652,8 @@ def test_access_fetch_to_nonterminal_stdout_is_refused(tmp_path, monkeypatch):
         "warden.proxy.subprocess.run",
         lambda *a, **k: (_ for _ in ()).throw(AssertionError("fetch ran despite stdout guard")),
     )
+    # This case tests the human stdout guard; the agent guard has its own tests.
+    monkeypatch.setattr("warden.access.agent_read_boundary_identity", lambda: "")
     # CliRunner captures stdout (not a tty), so the guard trips without --unsafe-stdout.
     r = runner.invoke(app, ["access", "whynot-design-npm-publish", "--fetch"])
     assert r.exit_code == 6