docs(WP-0010): sharpen mission to "issue SSH, route the rest" + pointer catalog

Implements WARDEN-WP-0010 (charter + pointer catalog). ops-warden issues
short-lived SSH certificates and routes every other credential need to the
subsystem that owns it — no desk metaphor, one execution lane.

- wiki/AccessRouting.md: role/boundary, issue-vs-route matrix, anti-patterns
- registry/routing/catalog.yaml: machine-readable pointer layer (6 active + 1
  draft). No-double-source rule enforced structurally — authored steps/cert_command
  only on the warden_executes:true SSH entry; every wiki_ref anchor resolves
- wiki/CredentialRouting.md: catalog-keyed index + no-duplicate-interfaces note
- INTENT/SCOPE/AGENTS/repo-boundary/capability: aligned to the new framing;
  SCOPE notes A3 -> A4 lands with WP-0011 warden route CLI
- WP-0011/0012 + WP-0010: state_hub id writeback; WP-0010 marked done

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

workplans/WARDEN-WP-0012-routing-scenario-playbooks.md

@@ -11,6 +11,7 @@ planning_priority: medium
 planning_order: 12
 created: "2026-06-18"
 updated: "2026-06-18"
+state_hub_workstream_id: "a7e712a0-02f8-4f83-944e-6b207e77bc4c"
 ---
 
 # WARDEN-WP-0012 — Routing Scenario Playbooks
@@ -64,6 +65,7 @@ pointer to a non-existent path is worse than no entry.
 id: WARDEN-WP-0012-T01
 status: todo
 priority: high
+state_hub_task_id: "830bb512-0288-4dba-9dd4-ccfd28a4921f"
 ```
 
 - [ ] Coordinate with railiance-platform to canonicalize the OpenBao path first.
@@ -77,6 +79,7 @@ priority: high
 id: WARDEN-WP-0012-T02
 status: todo
 priority: medium
+state_hub_task_id: "7726a703-6e00-4e49-9380-ed3fb3268827"
 ```
 
 - [ ] Align `wiki/InterHubBootstrapAccessLane.md` with the catalog id.
@@ -89,6 +92,7 @@ priority: medium
 id: WARDEN-WP-0012-T03
 status: todo
 priority: medium
+state_hub_task_id: "9fb397f0-0abb-48f5-bb62-7e77edae93bb"
 ```
 
 - [ ] Playbook: static-key → `cert_command` migration checklist.
@@ -100,6 +104,7 @@ priority: medium
 id: WARDEN-WP-0012-T04
 status: todo
 priority: low
+state_hub_task_id: "edcf4ed7-f18d-4a92-a42d-8cc7ca0ab792"
 ```
 
 - [ ] Playbooks for OpenRouter, object-storage STS, DB dynamic creds.
@@ -111,6 +116,7 @@ priority: low
 id: WARDEN-WP-0012-T05
 status: todo
 priority: low
+state_hub_task_id: "db98d655-8551-487b-9413-41bf97fc06e1"
 ```
 
 - [ ] Document a review cadence against net-kingdom canon.