Land feature 57's controller work on its release branch

The controller plans config, templates and moved providers' provisions,
hands bus accounts to the vault and judges the new manifest words, on the
feature's SDK and node-engine validator (feature 57, config and provisioning).

internal/catalogue/endpoints_setting_test.go

@@ -7,7 +7,7 @@ import (
 
 func configured(block map[string]any) SettingsBy {
 	return SettingsBy{"media": {{From: "node anchor",
-		Values: map[string]any{EndpointsSetting: block}}}}
+		Placement: map[string]any{EndpointsSetting: block}}}}
 }
 
 // **One block per endpoint, saying all three things.** The machine port, the subdomain and the reach
@@ -109,7 +109,7 @@ func TestAReachInABlockIsHeldToTheFourValues(t *testing.T) {
 // **Two places giving one endpoint a machine port is the confusion this key exists to end.**
 func TestAnEndpointGivenAPortTwiceIsRefused(t *testing.T) {
 	m := aMediaServer()
-	_, err := GivenPorts(m, []Layer{{From: "node anchor", Values: map[string]any{
+	_, err := GivenPorts(m, []Layer{{From: "node anchor", Placement: map[string]any{
 		EndpointsSetting: map[string]any{"web": map[string]any{"port": 20009}},
 		PortsSetting:     map[string]any{"80": 30000},
 	}}})
@@ -120,7 +120,7 @@ func TestAnEndpointGivenAPortTwiceIsRefused(t *testing.T) {
 
 // And the same for its reach, said once here and once through the older key.
 func TestAnEndpointWhoseReachIsAlsoExposedIsRefused(t *testing.T) {
-	_, err := Endpoints(aMediaServer(), []Layer{{From: "node anchor", Values: map[string]any{
+	_, err := Endpoints(aMediaServer(), []Layer{{From: "node anchor", Placement: map[string]any{
 		EndpointsSetting: map[string]any{"web": map[string]any{"reach": ReachInternal}},
 		ExposeSetting:    map[string]any{"80": FromEverywhere},
 	}}})