Add PhoneLookupMode to ToolchainConfig CRD

config/crd/bases/toolchain.dev.openshift.com_toolchainconfigs.yaml

@@ -356,6 +356,25 @@ spec:
                               NotificationSender is used to specify which service should be used to send verification notifications. Allowed
                               values are "twilio", "aws".  If not specified, the Twilio sender will be used.
                             type: string
+                          phoneLookupExcludedCountries:
+                            description: |-
+                              PhoneLookupExcludedCountries is a list of ISO 3166-1 alpha-2 country codes (e.g. ["CA", "US"])
+                              for which Twilio Lookup should be skipped.
+                            items:
+                              type: string
+                            type: array
+                            x-kubernetes-list-type: set
+                          phoneLookupMode:
+                            default: log
+                            description: |-
+                              PhoneLookupMode controls how the registration service handles Twilio Lookup v2 phone risk checks.
+                              Valid values are "disabled" (skip Lookup entirely), "log" (call Lookup and store results but don't block),
+                              and "enabled" (call Lookup and enforce blocking). Defaults to "log".
+                            enum:
+                            - disabled
+                            - log
+                            - enabled
+                            type: string
                           secret:
                             description: Defines all secrets related to the registration
                               service verification configuration