ADR 0283: a part waiting for the operator's secret or setting is said as waiting and passes the first-node gate (issue 386)

A module whose only unhealthy part waited for the operator's secret failed
its gate, held every later walk and told the operator there was nothing to
do. The record adds a waits answer and a waiting state, checked by the
controller, read by the gate as waits for a person, and said as a
needs-operator condition naming the act; and secret families so each SMB
source's password is one hidden line at the desk prompt.

00-META/glossary.md

@@ -265,6 +265,9 @@ and the operator act. **Recorded by** the controller's `identity` and `licences`
   is the two ends of one credential, the consumer's and the provider's.
 - **secret** — a credential or other value the vault keeps sealed and the node-engine unseals into a
   file at apply ([ADR 0085](../02-DECISIONS/0085-a-secret-is-a-provision.md)).
+- **secret family** — a module's own secrets declared as one name ending in `-*`, one member per part its
+  settings name (`smb-password-<source>`), each given by its full name and never made by the mesh
+  ([ADR 0283](../02-DECISIONS/0283-a-part-that-waits-for-the-operators-secret-or-setting-is-said-as-waiting-passes-the-first-node-gate-and-names-the-act.md)).
 - **vault** — the module that owns every secret (`mesh-vault`,
   [24 — The secrets vault](../03-DESIGN/01-to-be/24-the-secrets-vault.md)).
 - **grant** — what an identity may call or reach, bounded by the provisions it requires
@@ -387,7 +390,7 @@ planner, the walk). **Downstream of** Module, Core, Health and repair and Data.
 **Purpose.** To notice what is wrong with the mesh, say it once, repair what may be repaired unattended,
 and record what was done by hand. **Recorded by** the controller's condition store.
 **Upstream of** Change and delivery (the first-node gate) and Operator and conversation (a condition
-becomes a message). **Decided by** ADR 0227, 0231, 0240, 0252.
+becomes a message). **Decided by** ADR 0227, 0231, 0240, 0252, 0283.
 **Uses:** node, module, node-engine (Core).
 
 - **health** — a module's or a core component's statement of how it is alive and ready, which the
@@ -395,6 +398,11 @@ becomes a message). **Decided by** ADR 0227, 0231, 0240, 0252.
 - **relogin needed** — an account's health when the group database lists it in an account group and its
   running session, started before, does not have that group yet. Said by the node-engine as the module's
   resource of kind `account`; it clears at the first look after a new login (ADR 0252).
+- **waiting** — a resource's health when its module's tool check says it waits for the operator: a named own
+  secret or setting of the module, not given yet, without which a part cannot work. Not a fault: the
+  controller checks it and says it as the condition `needs-operator`, naming the act, and the first-node gate
+  reads it as *waits for a person*
+  ([ADR 0283](../02-DECISIONS/0283-a-part-that-waits-for-the-operators-secret-or-setting-is-said-as-waiting-passes-the-first-node-gate-and-names-the-act.md)).
 - **probe** — one look at one thing's health, run by whoever owns the verdict; what a probe returns is a
   **finding**, before it becomes a condition.
 - **signal** and **watchdog** — something that must keep happening (a heartbeat, a report after a send),