chore: classify governed administration endpoints

tools/inventory/endpoint-surface-declarations.json

@@ -469,6 +469,69 @@
       "rationale": "This capability-first module intentionally exposes a headless API for other modules and integrations.",
       "repository": "govoplan-connectors"
     },
+    {
+      "category": "ui_reachable",
+      "method": "GET",
+      "path": "/connectors/governed/configurations",
+      "rationale": "The Connector governance administration page lists tenant configurations through this endpoint.",
+      "repository": "govoplan-connectors"
+    },
+    {
+      "category": "ui_reachable",
+      "method": "POST",
+      "path": "/connectors/governed/configurations",
+      "rationale": "The Connector governance administration page creates tenant configurations through this endpoint.",
+      "repository": "govoplan-connectors"
+    },
+    {
+      "category": "ui_reachable",
+      "method": "PUT",
+      "path": "/connectors/governed/configurations/{}",
+      "rationale": "The Connector governance administration page constructs this revision-guarded URL from the selected configuration identifier.",
+      "repository": "govoplan-connectors"
+    },
+    {
+      "category": "ui_reachable",
+      "method": "POST",
+      "path": "/connectors/governed/configurations/{}/dry-runs",
+      "rationale": "The Connector governance administration page constructs this bounded dry-run URL from the selected configuration identifier.",
+      "repository": "govoplan-connectors"
+    },
+    {
+      "category": "ui_reachable",
+      "method": "POST",
+      "path": "/connectors/governed/configurations/{}/simulations",
+      "rationale": "The Connector governance administration page constructs this bounded simulation URL from the selected configuration identifier.",
+      "repository": "govoplan-connectors"
+    },
+    {
+      "category": "ui_reachable",
+      "method": "GET",
+      "path": "/connectors/governed/definitions",
+      "rationale": "The Connector governance administration page lists governed connector definitions through this endpoint.",
+      "repository": "govoplan-connectors"
+    },
+    {
+      "category": "ui_reachable",
+      "method": "POST",
+      "path": "/connectors/governed/definitions",
+      "rationale": "The Connector governance administration page publishes immutable connector-definition revisions through this endpoint.",
+      "repository": "govoplan-connectors"
+    },
+    {
+      "category": "ui_reachable",
+      "method": "GET",
+      "path": "/connectors/governed/runs",
+      "rationale": "The Connector governance administration page lists dry-run and simulation evidence through this endpoint.",
+      "repository": "govoplan-connectors"
+    },
+    {
+      "category": "ui_reachable",
+      "method": "POST",
+      "path": "/connectors/governed/runs/{}/review",
+      "rationale": "The Connector governance administration page constructs this review-decision URL from the selected run identifier.",
+      "repository": "govoplan-connectors"
+    },
     {
       "category": "intentionally_headless",
       "method": "GET",
@@ -924,6 +987,20 @@
       "rationale": "Retained compatibility endpoint; current module surfaces use the replacement contract.",
       "repository": "govoplan-identity"
     },
+    {
+      "category": "ui_reachable",
+      "method": "POST",
+      "path": "/identity/identities/{}/activate",
+      "rationale": "The Identity administration workspace constructs this explicit lifecycle-action URL from the selected identity identifier.",
+      "repository": "govoplan-identity"
+    },
+    {
+      "category": "ui_reachable",
+      "method": "POST",
+      "path": "/identity/identities/{}/deactivate",
+      "rationale": "The Identity administration workspace constructs this explicit lifecycle-action URL from the selected identity identifier.",
+      "repository": "govoplan-identity"
+    },
     {
       "category": "intentionally_headless",
       "method": "POST",