Propose removing the retired bao.coulomb.social callback from CCR-2026-0004/0019/0034

bao.coulomb.social was retired on 2026-09-15. Each OIDC role keeps only the
loopback CLI callbacks. Needs founder approval before the re-apply.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 132360@bnt-lap001
Assistant-Session: 769b1afd-4330-4c86-96b2-e510e26db42b

credential-change-requests/CCR-2026-0004-railiance-backup-offsite-lane.yaml

@@ -40,7 +40,6 @@ openbao:
     mount: netkingdom
     role: railiance-backup-workload-kv-read
     allowed_redirect_uris:
-    - https://bao.coulomb.social/ui/vault/auth/netkingdom/oidc/callback
     - http://localhost:8250/oidc/callback
     - http://127.0.0.1:8250/oidc/callback
     oidc_scopes:

credential-change-requests/CCR-2026-0019-secrets-engine-approval-client-read.yaml

@@ -75,7 +75,6 @@ openbao:
     mount: netkingdom
     role: secrets-engine-approval-client-workload-kv-read
     allowed_redirect_uris:
-    - https://bao.coulomb.social/ui/vault/auth/netkingdom/oidc/callback
     - http://localhost:8250/oidc/callback
     - http://127.0.0.1:8250/oidc/callback
     oidc_scopes:

credential-change-requests/CCR-2026-0034.yaml

@@ -72,7 +72,6 @@ openbao:
     mount: netkingdom
     role: keycape-secrets-engine-openbao-operator-workload-kv-read
     allowed_redirect_uris:
-    - https://bao.coulomb.social/ui/vault/auth/netkingdom/oidc/callback
     - http://localhost:8250/oidc/callback
     - http://127.0.0.1:8250/oidc/callback
     oidc_scopes: