Add credential lane readiness proposals

schemas/credential-change-request.schema.yaml

@@ -71,6 +71,8 @@ workload_kv_read:
     access_frontdoor:
       - type
       - catalog_id
+      - readiness
+      - resolvable
     verification:
       - positive
       - negative
@@ -80,6 +82,20 @@ workload_kv_read:
       - rotate
       - compromised
 
+access_frontdoor_readiness:
+  allowed:
+    - template
+    - pending-review
+    - approved-pending-apply
+    - applied-pending-verify
+    - ready
+    - disabled
+    - compromised
+  resolvable_true_requires_status: active
+  ops_warden_should_consume_only:
+    readiness: ready
+    resolvable: true
+
 guardrails:
   apply_plan_requires_status:
     - approved