chore(consistency): sync task status from DB [auto]

Updated by fix-consistency on 2026-09-13:
  - update .custodian-brief.md for key-cape

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c

.custodian-brief.md

@@ -2,24 +2,25 @@
 # Custodian Brief — key-cape
 
 **Domain:** infotech  
-**Last synced:** 2026-09-12 22:27 UTC  
+**Last synced:** 2026-09-13 12:24 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
-### Opt-in MFA for demo-company login
-Progress: 1/3 done  |  workplan_id: `b27601d8-d0a5-5c79-a1ff-c2a4cedafa74`
-
-**Open tasks:**
-- ! Restore authoritative factor lookup and enable the reviewed client  `b066a273`
-- ! Verify optional enrollment and account management access  `93ce2e97`
-
 ### Browser authentication recovery and confirmed shared sign-out
 Progress: 1/2 done  |  workplan_id: `49b0cd1d-fb9d-5351-99eb-9be9143a092d`
 
 **Open tasks:**
 - ► Publish and verify the recovery flow  `4c836ddf`
 
+### Opt-in MFA for demo-company login
+Progress: 1/4 done  |  workplan_id: `b27601d8-d0a5-5c79-a1ff-c2a4cedafa74`
+
+**Open tasks:**
+- ! Restore authoritative factor lookup and enable the reviewed client  `b066a273`
+- ! Verify optional enrollment and account management access  `93ce2e97`
+- ► Support bounded provider credential renewal without issuer restart  `494f554d`
+
 ### Preserve fresh-user authentication for the Vergabe company handoff
 Progress: 1/2 done  |  workplan_id: `144dd430-1a09-51e1-9aad-e799ee86c338`