Three Gates on Standard-User BitLocker State Observation

The day started with a P1 on merge day Closing intent-blue-gold Epic 1+2 was supposed to be the easy part. The hard parts were the constraints, set in DOC-075/A03: a standard-user account on ARM64 Win