Implement bounded browser service, consumer evidence and managed package

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a13590-a16f-7f60-be60-fd71627bc99d

declarations/rapp.yaml

@@ -0,0 +1,50 @@
+kind: managed-workload-package
+repo_family: rapp
+rapp_id: rapp-playwright
+repo: rapp-playwright
+ownership_repo: railiance-platform
+contract_version: 1.0.0
+readiness_state: draft
+workload_identity:
+  name: playwright
+  package_type: manifest-managed-platform-service
+  app_version: 0.1.0
+  service_account: playwright
+  notes:
+    - Service implementation and consumer contract remain in rapp-playwright.
+    - Founder selected railiance-platform as lifecycle owner on 2026-10-13; admission confirmation remains requested in State Hub c82d75f3-3191-410d-a8c8-fd647bf7f3ef.
+data_classification: internal
+criticality: low
+primary_rail: rail-kubernetes
+supported_rails: [rail-kubernetes]
+bound_reefs: []
+runtime_dependencies: [kubernetes-api, forgejo-oci-registry, local-path-storage]
+exposure:
+  posture: private
+composition:
+  purpose: Provide bounded Playwright UI test jobs with responsive screenshots and keyboard evidence to coding agents.
+  member_repos:
+    - repo: rapp-playwright
+      role: browser service, consumer client and managed package
+      deployables: [playwright]
+  upstream_components:
+    - name: playwright
+      source: https://github.com/microsoft/playwright
+      version: 1.64.0
+    - name: playwright-browser-image
+      source: mcr.microsoft.com/playwright
+      version: sha256:06a9939e57531807f8d5fd76ce44b53165ffb7d7501d87ab10e285c20b1e971f
+rollout_contract:
+  default_mode: kubectl-server-side-apply
+  commands: [make render, make server-dry-run, make deploy]
+  production_gate: founder-authorized-workplan-and-platform-admission
+smoke_contract:
+  required: [browser-launch, responsive-keyboard-trial, run-token-isolation, origin-gate, bounded-cancellation, restart-recovery, immutable-image-match]
+  commands: [make test, make test-integration, make verify-live]
+rollback_contract:
+  order: [previous-immutable-image-digest, apply-reviewed-git-revision]
+  commands: [make rollback IMAGE_REFERENCE=<previous-digest-reference>]
+source_documents:
+  - {repo: rapp-playwright, path: INTENT.md}
+  - {repo: rapp-playwright, path: docs/consumer-contract.md}
+  - {repo: railiance-master, path: schemas/rapp.schema.json}