Add routing catalog entry for reuse-surface hub write token.

REUSE_SURFACE_TOKEN is custody of the Railiance01 K8s secret reuse-surface-env,
not OpenBao. Workers blocked on hub register can now discover the lane via
warden route find and obtain it through the documented kubectl handoff.

tests/test_routing.py

@@ -277,6 +277,21 @@ def test_find_openrouter_key():
     assert matches and matches[0].id == "openrouter-llm-connect"
 
 
+def test_find_reuse_surface_hub_write_token():
+    catalog = load_catalog(_repo_catalog())
+    matches = catalog.find("REUSE_SURFACE_TOKEN", limit=3)
+    assert matches and matches[0].id == "reuse-surface-hub-write-token"
+
+
+def test_reuse_surface_hub_write_token_lane_is_resolvable():
+    catalog = load_catalog(_repo_catalog())
+    e = catalog.get("reuse-surface-hub-write-token")
+    assert e is not None and e.is_active and e.exec_capable
+    assert e.resolvable is True
+    assert e.owner_repo == "reuse-surface"
+    assert "reuse-surface-env" in e.fetch_command
+
+
 def test_find_object_storage_sts():
     catalog = load_catalog(_repo_catalog())
     matches = catalog.find("s3 temporary credentials", include_draft=True)