feat: prepare scoped State Hub preflight signing custody and rotation

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06ed7-828d-7ca0-a8d4-0c3e5a0c4102

tests/test_state_hub_preflight_lane.py

@@ -48,11 +48,6 @@ class SigningLaneTests(unittest.TestCase):
     def test_proposed_ccr_cannot_reach_writer(self):
         proposed = copy.deepcopy(self.ccr)
         proposed['status'] = 'proposed'
-        with patch.object(lane.importlib.util, 'module_from_spec', return_value=cc), \
-             patch.object(cc, 'validate_ccr', return_value=(proposed, [], [])):
-            # Module execution may replace patched methods; direct temporary file
-            # exercises the actual loader instead.
-            pass
         import tempfile, yaml
         with tempfile.TemporaryDirectory() as tmp:
             file = Path(tmp) / 'ccr.yaml'