Developer portal / service catalog (Backstage)

[gangster]

Capability gap identified against the CNCF Platforms White Paper. — capability #1 Web portal for observing & provisioning (and the surface for #2 self-service APIs).

Current: ArgoCD UI shows deploy state; provisioning is platform-engineer-gated PRs to teams.hcl. No developer portal / service catalog.

Scope: Backstage (or equivalent) with a software catalog, the golden-path docs surfaced, deploy/build/observability links, and self-service scaffolding actions. Pairs with #88 (self-service tenant model) and the scaffolding issue.

[gangster]

Done — Backstage is live at backstage.aws.refplat.org (BACK-stack P4, phases 2.0–2.4b): software catalog + the platform-projection entity provider (Teams/Tenants/resources from the gitops claims, now v1alpha2-shaped — backstage#24), TechDocs, live Kubernetes + ArgoCD plugins, direct Keycloak OIDC SSO with group-based RBAC (#197, backstage#23). The remaining portal capabilities have their own tracked slices: scaffolding/self-service → #279–#285 (ADR-062), more plugins → #177, Terraform-infra catalog → #200.