feat(authz): add email-authorized GHDR dual signing

server-tools/lake-lamp-authz/navigation-maps/GH-CVM-MAIN-PROD-01.json

@@ -0,0 +1,19 @@
+{
+  "schema": "guanghu.navigation-map/v1",
+  "node_id": "GH-CVM-MAIN-PROD-01",
+  "display_name": "光湖企业原生 OS 主节点",
+  "provider": "tencent_cloud",
+  "region": "ap-guangzhou",
+  "system_disk": "/dev/vda",
+  "authorized_entry": "JD-FD-PRIMARY email authorization",
+  "allowed_actions": [
+    "read-navigation-map",
+    "sign-native-layout-plan"
+  ],
+  "safety": {
+    "private_keys_exportable": false,
+    "controller_signatures_required": 2,
+    "independent_failure_domains_required": 2,
+    "raw_disk_write": "blocked_until_valid_double_signature"
+  }
+}