Finish coding-agent high-risk boundary coverage

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa

openbao/auth/coding-agent-jwt-role.json

@@ -0,0 +1,23 @@
+{
+  "role_type": "jwt",
+  "bound_audiences": [
+    "codex-railiance-platform"
+  ],
+  "user_claim": "sub",
+  "bound_claims_type": "string",
+  "bound_claims": {
+    "sub": "service:codex:railiance-platform",
+    "principal_type": "service",
+    "tenant": "tenant:coulomb",
+    "roles": "coding-agent"
+  },
+  "token_policies": [
+    "agent-high-risk-boundary",
+    "workload-kv-read-issue-core-runtime"
+  ],
+  "token_ttl": "15m",
+  "token_max_ttl": "15m",
+  "token_num_uses": 8,
+  "token_no_default_policy": true,
+  "verbose_oidc_logging": false
+}