Record native ESO result and prepare scoped self-token amendment

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a10780-6d41-7952-9718-dfbc1f41236f

openbao/policies/workload-kv-read-informed-decision-sitting-requester-eso.hcl

@@ -1,3 +1,11 @@
 path "platform/data/workloads/informed-decision/sitting-requester" {
   capabilities = ["read"]
 }
+
+path "auth/token/lookup-self" {
+  capabilities = ["read"]
+}
+
+path "auth/token/revoke-self" {
+  capabilities = ["update"]
+}