Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults

- WP-0025-T03 done: public listener retracted 2026-09-15; bao.coulomb.social
  is retired, tunnel is the operator path; DNS withdrawal handed to S1.
- WP-0043-T01 done: ArgoCD Core reconciles railiance01 at main (evidence).
- WP-0043-T05 done: direct-apply gap inventory and founder proposal.
- WP-0045-T05 cancelled (no rollback needed); T06 preconditions recorded.
- Operator scripts default BAO_ADDR to the openbao-ui-railiance01 tunnel.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 150322@bnt-lap001
Assistant-Session: 16a7b788-374e-4915-a1df-fc87ffd9a5e4

scripts/verify_coding_agent_approle.py

@@ -13,7 +13,7 @@ import urllib.request
 from typing import Any
 
 
-DEFAULT_ADDR = "https://bao.coulomb.social"
+DEFAULT_ADDR = "http://127.0.0.1:18200"  # openbao-ui-railiance01 tunnel
 DATA_PATH = "platform/data/workloads/issue-core/issue-core/issue-core-runtime"
 METADATA_PATH = (
     "platform/metadata/workloads/issue-core/issue-core/issue-core-runtime"