chore(consistency): register FLEX-WP-0023 and refresh work records

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014aQMM1dPXaPiXVn6DwwtLd

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 715613@bnt-lap001
Assistant-Session: fabd95c1-4c9e-4080-8849-8707ae025f80

workplans/FLEX-WP-0023-operator-caller-access-path.md

@@ -16,6 +16,7 @@ related_workplans:
   - SECRETS-WP-0009
 created: "2026-09-06"
 updated: "2026-09-06"
+state_hub_workstream_id: "ad011f92-786c-51ad-b3f6-c06ad77e7af7"
 ---
 
 # FLEX-WP-0023 — Operator caller access path and caller identity in the decision record
@@ -47,6 +48,7 @@ admitted exactly one pod. Here the warn window protects nothing while it runs.
 id: FLEX-WP-0023-T01
 status: todo
 priority: high
+state_hub_task_id: "10e5a40c-f142-55b9-ab15-fc77c0064ce0"
 ```
 
 Owner: `flex-auth`; production write, operator approval required.
@@ -73,6 +75,7 @@ Gate: `kubectl -n secrets-engine create token secrets-engine --audience=flex-aut
 id: FLEX-WP-0023-T02
 status: wait
 priority: high
+state_hub_task_id: "79a8d82d-777c-5462-b49d-098f4b7a3b9c"
 ```
 
 Owner: `flex-auth` to run; `glas-harness` to receive.
@@ -109,6 +112,7 @@ isolates. Nothing is reported as verified that was not run.
 id: FLEX-WP-0023-T03
 status: wait
 priority: high
+state_hub_task_id: "8117c9d8-6efa-5ccf-8ed4-4da2519c3de3"
 ```
 
 Owner: `flex-auth`; deployment approval required.
@@ -132,6 +136,7 @@ caller adoption is proved — is satisfied by `T02`, not bypassed by this task.
 id: FLEX-WP-0023-T04
 status: todo
 priority: high
+state_hub_task_id: "c0e4f31a-cc42-5bd2-b938-d140ecd52e1a"
 ```
 
 Owner: `flex-auth`.
@@ -166,6 +171,7 @@ same request's `request_digest` is byte-identical to the pre-change value.
 id: FLEX-WP-0023-T05
 status: wait
 priority: medium
+state_hub_task_id: "d685abfc-cf86-50c8-ad5e-2c04e1531ddd"
 ```
 
 Owner: `flex-auth`.