WARDEN-WP-0029: implement plan front door, org posture, desk, freshness

Ship posture-aware access planning: organization_posture=build (axis C),
catalog freshness warnings, warden plan verdicts, localhost founder desk,
and playbook/agent guidance that retire /tmp file-drop patterns.

Compose route catalog + handoff rather than a second routing layer.

src/warden/routing/__init__.py

@@ -5,12 +5,19 @@ subsystem. It loads the machine-readable routing catalog and answers "who owns
 this need and where is the authoritative doc". The one lane ops-warden executes
 (SSH certificate issuance) is the only entry that carries authored steps.
 """
-from warden.routing.catalog import Catalog, CatalogError, find_catalog_path, load_catalog
+from warden.routing.catalog import (
+    Catalog,
+    CatalogError,
+    CatalogFreshness,
+    find_catalog_path,
+    load_catalog,
+)
 from warden.routing.models import RouteEntry
 
 __all__ = [
     "Catalog",
     "CatalogError",
+    "CatalogFreshness",
     "RouteEntry",
     "find_catalog_path",
     "load_catalog",