VpcStatus

The VPC's lifecycle. creating and deleting are owned by a job — activeJobId names it. failed is a create that did not finish: the VPC is not retried in place, it is deleted and created again, and failureReason carries the provider's own words about why. A named schema rather than an inline enum so a generated client keys on the member names.