Regarding CiviCRM and frdev1001 accounts mostly. We have a fairly ad-hoc process atm which needs clarification around urgency and scheduling. I have started documenting here: https://wikitech.wikimedia.org/wiki/Fundraising/tech/access

But it needs a lot more, for instance the fact that PCI requires us to disable inactive accounts after 90 days.