Add informed-decision-sitting-requester reader login lane.

Exact CCR-2026-0027 OIDC role. No secret fetch. Platform owns the
reviewed exchange-proof child.

Assistant: grok
Assistant-Session: 01a0a23b-3bf0-7341-b4e5-9dc05f72573a

registry/generated/high-risk-data-paths.yaml

@@ -10,12 +10,12 @@
 # declares it, and is null where the field set has not been established --
 # null means unknown, never 'one field'.
 
-generated_at: "2026-09-14T07:58:30Z"
+generated_at: "2026-09-15T18:38:11Z"
 source: ops-warden/registry/routing/catalog.yaml
-catalog_revision: "4ebd241d88e0f65125b3097a6d3aeccd4c294eb6"
-catalog_revision_date: "2026-09-14T04:57:55+02:00"
+catalog_revision: "8a40dcb11b729115773630e449fd880c0700372e"
+catalog_revision_date: "2026-09-14T09:59:11+02:00"
 catalog_dirty: true
-high_risk_lane_count: 28
+high_risk_lane_count: 29
 concrete_path_count: 15
 
 # Graded high but not a single KV address -- a routing pattern, a broker
@@ -23,6 +23,7 @@ concrete_path_count: 15
 no_concrete_path:
   - database-dynamic-credentials
   - flex-auth-decision-envelope-signing-key
+  - informed-decision-sitting-requester-login
   - inter-hub-bootstrap-ssh
   - net-kingdom-lldap-bind-credential
   - net-kingdom-privacyidea-admin-token