seed: planned Scaleway backup store for WP-0002

Identity, topology, consumer bindings, and the planned attribute file
(region nl-ams, endpoint/bucket still null). Post-purchase fill is
REEF-STORAGE-WP-0002.

substrate/object-stores/platform-audit-storage.yaml

@@ -1,15 +1,24 @@
-# Planned. Fill after RESOURCE-WP-0002 purchase. No secrets.
+# Planned primary for RESOURCE-WP-0002. Fill endpoint/bucket/prefix after purchase.
+# No secrets in this file.
 schema_version: "0.1"
 resource_id: resource:platform:audit-storage
 provider: Scaleway
+product: standard-multi-az
 status: planned
 endpoint: null
-region: null
+region: nl-ams
 bucket: null
 prefix: null
 versioning: null
 lifecycle: null
 provider_project_ref: null
+intended:
+  public_access: disabled
+  versioning: true
+  lifecycle: 30-day recovery window matching data/demand/platform-audit-storage.json
+  encryption_at_rest: provider-managed
+  identity: bucket-and-prefix scoped key only
 notes:
   - Destination for rapp-postgres WAL and base backups once procured.
   - resource-control cites reef:storage/substrate/object-stores/platform-audit-storage.yaml#<key>
+  - "Decision record: resource-control/docs/evidence/RESOURCE-WP-0002-primary-selection-2026-08-14.md"