Current state
1. Deploy
Only the account that deployed the infrastructure is authorized. Keep the four resulting addresses: until the wiring below is executed they are not stored anywhere on-chain.
Project wallets
2. Wire with FROST operations
Each step: show the operation, sign it in a FROST session, authorize, then execute here. Fee manager steps share one nonce, so finish each before starting the next.
3. Global registry
Registry owner only; no FROST session needed.