Route dynamic database credentials to rapp-postgres

registry/routing/catalog.yaml

@@ -552,13 +552,15 @@ entries:
   - id: database-dynamic-credentials
     title: Database dynamic credentials (OpenBao secrets engine)
     need_keywords: [database, db, postgres, cnpg, dynamic, credentials, password, lease, openbao]
-    owner_repo: railiance-platform
-    subsystem: OpenBao
+    owner_repo: rapp-postgres
+    subsystem: rapp-postgres + railiance-platform OpenBao broker
     warden_executes: false
     wiki_ref: wiki/playbooks/database-dynamic-credentials.md#worker-checklist
-    canon_ref: net-kingdom/docs/platform-identity-security-architecture.md
-    reviewed: "2026-06-24"
-    status: draft
+    canon_ref: rapp-postgres/docs/canon-drafts/shared-platform-relational-storage_v0.1-draft.md
+    reviewed: "2026-08-10"
+    status: active
+    risk: high
+    exec_capable: false
 
   - id: rein-openweights-openrouter-approle
     title: rein-openweights AppRole for non-interactive OpenRouter key read