[1953] feat: populate Expiring/Expired Conditions for Application Credentials

Wires the App Credential helpers (#1953 prior commit) through the
validation flow and controller status path:

- pkg/common/validation/openstack: extends ValidationResult with an
  AppCred *utils.AppCredentialDetails field. validateFromCloudsYAML
  calls utils.FetchAppCredentialDetails after successful auth when
  auth_type is v3applicationcredential; populates result.AppCred when
  the metadata fetch succeeds, logs a non-fatal info message and
  leaves AppCred nil when the fetch is unavailable.

- internal/controller/openstackcreds_controller: setConditionsForValidResult
  now takes the AppCred details and uses utils.EvaluateAppCredExpiration
  to set Expiring / Expired Conditions. Mapping:
  - expired               -> Expired=True (Reason: Expired)
  - within 7 days         -> Expiring=True (Reason: Within7Days)
  - within 30 days        -> Expiring=True (Reason: Within30Days)
  - beyond / not App Cred -> Expiring=False, Expired=False (NotApplicable / Active)

- internal/controller/openstackcreds_controller: setConditionsForInvalidResult
  drops the inline heuristic switch and uses utils.MapKeystoneError on
  the raw validation error. Typed gophercloud HTTP status codes win
  over string matching when available.

Existing TestApplyValidationResult_ValidationFailure passes unchanged
(MapKeystoneError preserves the existing Reason output for 401 and
timeout error strings the test exercises).

Implements FR-007 / FR-008 / FR-009.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: gtherond

graphify-out/.graphify_labels.json

@@ -85,16 +85,19 @@
   "83": "Protobuf Service",
   "84": "Protobuf Service",
   "85": "Protobuf Service",
+  "86": "Community 86",
   "87": "Protobuf Service",
   "88": "Controller Component",
   "89": "Component 89",
+  "90": "Community 90",
   "91": "Utilities",
   "92": "Protobuf Service",
   "93": "Protobuf Service",
   "94": "Controller Component",
   "95": "CRD API Types",
   "96": "Controller Component",
   "97": "Controller Component",
+  "98": "Community 98",
   "99": "Test Utilities",
   "100": "Test Utilities",
   "101": "Protobuf Service",
@@ -115,14 +118,14 @@
   "116": "OpenStack Component",
   "117": "Test Utilities",
   "118": "Controller Component",
+  "119": "Community 119",
   "120": "Test Utilities",
   "121": "Utilities",
   "122": "Component 122",
   "123": "Protobuf Service",
   "124": "VMware Component",
   "125": "Protobuf Service",
   "126": "Protobuf Service",
-  "127": "Community 127",
   "128": "Protobuf Service",
   "129": "Protobuf Service",
   "130": "Protobuf Service",
@@ -198,13 +201,18 @@
   "200": "Test Utilities",
   "201": "Protobuf Service",
   "202": "Protobuf Service",
+  "203": "Community 203",
   "204": "Protobuf Service",
   "205": "Server Component",
   "206": "Protobuf Service",
+  "207": "Community 207",
   "208": "Utilities",
   "209": "Component 209",
+  "210": "Community 210",
   "211": "RBAC Manifests",
   "212": "Test Utilities",
+  "213": "Community 213",
+  "214": "Community 214",
   "215": "Keystone Auth",
   "216": "Keystone Auth",
   "217": "Config & Samples",
@@ -213,7 +221,5 @@
   "221": "Component 221",
   "222": "Community 222",
   "223": "Community 223",
-  "224": "Community 224",
-  "227": "Community 227",
-  "231": "Community 231"
+  "224": "Community 224"
 }