0005 - App-specific S3 Bucket Provisioning

This public design note keeps the implementation summary visible while leaving private automation and repository details out.