fix(workplans): adopt ADR-007 derived identifiers for unregistered records

These workplans exist only in the retired local hub. Their random pre-ADR-007
identifiers are refused by C-06 as stale references, so they cannot be
registered. Deriving from the canonical record id takes no identity from
anything: central does not hold them and the old ids die with the cache.

Records central already holds were deliberately left untouched.

Refs CUST-WP-0068-T06

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006

workplans/FLEX-WP-0014-tenant-guardrail-policy-actions.md

@@ -16,7 +16,7 @@ related_workplans:
   - TEN-WP-0006
 created: "2026-08-16"
 updated: "2026-08-16"
-state_hub_workstream_id: "dd6d4e09-3664-4698-8c14-8cf1efc2d142"
+state_hub_workstream_id: "7de17bd2-5e7c-5355-ba1d-40a051a67746"
 ---
 
 # FLEX-WP-0014 - Authorize tenant-engine guardrail actions
@@ -60,7 +60,7 @@ is verified locally. Image + pin is a follow-on, named in T04.
 id: FLEX-WP-0014-T01
 status: done
 priority: high
-state_hub_task_id: "4f4e9fdb-ca21-40a9-b6af-ef0384cd230a"
+state_hub_task_id: "34fb239a-7f06-5e96-9f10-a6bbb85bf4c3"
 ```
 
 Add `tenant.guardrail.read` and `tenant.guardrail.set` to
@@ -94,7 +94,7 @@ read-only subject. Registry snapshot rebuilt (2 subjects, 2 groups).
 id: FLEX-WP-0014-T02
 status: done
 priority: medium
-state_hub_task_id: "ec0d2d80-4052-48b1-8d31-ca8e8eac3066"
+state_hub_task_id: "8ea87d5f-883a-5d63-89bb-33a3d0963472"
 ```
 
 tenant-engine split the actions so a PDP can read ceilings without being
@@ -120,7 +120,7 @@ subject.
 id: FLEX-WP-0014-T03
 status: done
 priority: high
-state_hub_task_id: "a744472b-59cb-45a3-b3b7-1cf734b04855"
+state_hub_task_id: "1029d2ce-bb37-530e-91ef-ded86f6f5be8"
 ```
 
 Add fixture pairs for: authorized `tenant-engine` read and set → allow;
@@ -165,7 +165,7 @@ Live `flex-auth serve` on `127.0.0.1:9098` + real `tenant-engine` on
 id: FLEX-WP-0014-T04
 status: done
 priority: low
-state_hub_task_id: "3516be81-825b-4c83-ae61-89ac914efd7a"
+state_hub_task_id: "b2b44215-ef08-5c50-b466-190156a88ef3"
 ```
 
 Confirm T01–T03. Notify `tenant-engine` naming the policy revision. State