Add attended Whitehat E2 credential projection

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa

manifests/whitehat-audit-e2-projection.yaml

@@ -0,0 +1,54 @@
+# Ephemeral, exact-path projection for WH-ENG-20260822-AUDIT-E2-01.
+# Apply only through scripts/audit-core-whitehat-e2-credentials.py during the
+# approved window. No value is present in this file.
+---
+apiVersion: external-secrets.io/v1
+kind: ClusterSecretStore
+metadata:
+  name: openbao-whitehat-audit-e2
+  labels:
+    app.kubernetes.io/part-of: railiance-platform
+    railiance-platform/engagement: WH-ENG-20260822-AUDIT-E2-01
+spec:
+  provider:
+    vault:
+      server: http://openbao.openbao.svc:8200
+      path: platform
+      version: v2
+      auth:
+        kubernetes:
+          mountPath: kubernetes
+          role: external-secrets-whitehat-audit-e2
+          serviceAccountRef:
+            name: external-secrets
+            namespace: external-secrets
+  conditions:
+    - namespaces:
+        - whitehat
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: whitehat-e2-audit-credentials
+  namespace: whitehat
+  labels:
+    app.kubernetes.io/part-of: railiance-platform
+    railiance-platform/engagement: WH-ENG-20260822-AUDIT-E2-01
+spec:
+  refreshInterval: 1m
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: openbao-whitehat-audit-e2
+  target:
+    name: whitehat-e2-audit-credentials
+    creationPolicy: Owner
+    deletionPolicy: Delete
+  data:
+    - secretKey: token-a
+      remoteRef:
+        key: engagements/WH-ENG-20260822-AUDIT-E2-01/audit-core/token-a
+        property: token
+    - secretKey: token-b
+      remoteRef:
+        key: engagements/WH-ENG-20260822-AUDIT-E2-01/audit-core/token-b
+        property: token