feat(api): expose credential escrow delivery lane

apps/api/tests/test_delivery_closure_workbench_api.py

@@ -56,6 +56,32 @@ def test_delivery_closure_workbench_uses_gitea_private_inventory_lane():
     )
 
 
+def test_delivery_closure_workbench_exposes_p0_005_credential_escrow_lane():
+    payload = load_delivery_closure_workbench()
+
+    _assert_delivery_workbench_shape(payload)
+    lane = {lane["id"]: lane for lane in payload["lanes"]}["credential_escrow"]
+
+    assert lane["source_id"] == "backup_dr_credential_escrow"
+    assert lane["status"] == "blocked_waiting_non_secret_credential_escrow_evidence"
+    assert lane["blocker_count"] == 5
+    assert lane["completion_percent"] == 0
+    assert lane["metric"]["kind"] == "credential_escrow_evidence"
+    assert lane["metric"]["workplan_id"] == "P0-005"
+    assert lane["metric"]["required_item_count"] == 5
+    assert lane["metric"]["effective_missing_count"] == 5
+    assert lane["metric"]["active_gate_present"] is True
+    assert lane["metric"]["preflight_status"] == "blocked_waiting_owner_response_content"
+    assert lane["metric"]["owner_response_received_count"] == 0
+    assert lane["metric"]["owner_response_accepted_count"] == 0
+    assert lane["metric"]["runtime_gate_count"] == 0
+    assert lane["metric"]["secret_value_collection_allowed"] is False
+    assert lane["metric"]["credential_marker_write_authorized_count"] == 0
+    assert lane["next_action"] == (
+        "collect_redacted_non_secret_evidence_refs_then_rerun_preflight"
+    )
+
+
 def _assert_delivery_workbench_shape(data: dict):
     assert data["schema_version"] == "delivery_closure_workbench_v1"
     assert data["summary"]["source_count"] == 7
@@ -115,6 +141,7 @@ def _assert_delivery_workbench_shape(data: dict):
     assert lane_ids == {
         "release",
         "production_deploy",
+        "credential_escrow",
         "gitea_private_inventory",
         "cicd_baseline",
         "gitea",