fix(workplans): adopt ADR-007 derived identifiers for unregistered records

These workplans exist only in the retired local hub. Their random pre-ADR-007
identifiers are refused by C-06 as stale references, so they cannot be
registered. Deriving from the canonical record id takes no identity from
anything: central does not hold them and the old ids die with the cache.

Records central already holds were deliberately left untouched.

Refs CUST-WP-0068-T06

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006

workplans/FLEX-WP-0013-restore-seven-action-tenant-engine-pin.md

@@ -17,7 +17,7 @@ related_workplans:
   - TEN-WP-0006
 created: "2026-08-16"
 updated: "2026-08-16"
-state_hub_workstream_id: "41df7845-a144-420d-9852-adabde0949b3"
+state_hub_workstream_id: "6f22ded6-a69c-531b-bfa6-2f8d5c886979"
 ---
 
 # FLEX-WP-0013 - Restore the seven-action tenant-engine policy pin
@@ -70,7 +70,7 @@ Do not move `flex-auth-user-engine`.
 id: FLEX-WP-0013-T01
 status: done
 priority: high
-state_hub_task_id: "22db4198-b9c3-4ebf-975a-5c44c6a75928"
+state_hub_task_id: "f84b0f20-f374-5d61-aa43-d1f886ea86c3"
 ```
 
 Set the tenant-engine digest to `9320df39` in:
@@ -96,7 +96,7 @@ that digest as live and `c25fc34a` as rollback.
 id: FLEX-WP-0013-T02
 status: done
 priority: high
-state_hub_task_id: "e5e76f15-369a-4573-8095-46ba05cd6b14"
+state_hub_task_id: "a77ff4bb-8927-5317-a0eb-903cfeef0de5"
 ```
 
 `kubectl apply -f deploy/flex-auth-tenant-engine.yaml` against railiance01,
@@ -145,7 +145,7 @@ deploy/flex-auth-tenant-engine.yaml` reused ReplicaSet
 id: FLEX-WP-0013-T03
 status: done
 priority: medium
-state_hub_task_id: "df616e44-cfea-4811-a986-90ea0f72b68b"
+state_hub_task_id: "832ba42f-4247-58a9-bc1b-f99648c2c188"
 ```
 
 Notify `tenant-engine` that TEN-WP-0005-T05 authority is restored, naming