fix(workplans): qualify ad-hoc identifiers with the repository prefix

`ADHOC-YYYY-MM-DD` is unique per date but not per repository, so any two repos
opening an ad-hoc on the same day collide. The 2026-08-26 fleet projection
reset refused 9 records for exactly this reason.

Canon (work-record-types_v0.1, CUST-WP-0066) settled the form as
`{PREFIX}-WP-ADHOC-YYYY-MM-DD`, filename unchanged, and grandfathered existing
ids on the condition they are never *silently* re-derived. This is the explicit
migration that clause allows for.

The hub id is derived from the record id, so a changed id is a different
record: stale state_hub_*_id fields are dropped and fix-consistency re-derives.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006

workplans/ADHOC-2026-07-02.md

@@ -1,5 +1,5 @@
 ---
-id: adhoc-2026-07-02
+id: NK-WP-ADHOC-2026-07-02
 type: workplan
 title: "Ad Hoc Tasks — 2026-07-02"
 domain: infotech
@@ -9,7 +9,6 @@ owner: codex
 topic_slug: net-kingdom
 created: "2026-07-02"
 updated: "2026-07-02"
-state_hub_workstream_id: "67c1c7ac-d8b1-41dc-a81a-4e43f1afd068"
 ---
 
 # Ad Hoc Tasks — 2026-07-02
@@ -17,10 +16,9 @@ state_hub_workstream_id: "67c1c7ac-d8b1-41dc-a81a-4e43f1afd068"
 ## Fix creds-bootstrap-agent Phase 0 dry-run on machines without the age key
 
 ```task
-id: ADHOC-2026-07-02-T01
+id: NK-WP-ADHOC-2026-07-02-T01
 status: done
 priority: low
-state_hub_task_id: "b86bf898-7916-4db3-ba67-ba3a3fd8a49f"
 ```
 
 `--dry-run` previously aborted silently in Phase 0 on any machine without
@@ -37,7 +35,7 @@ no age key.
 ## Fix broken check-secrets Make target (unescaped `$`)
 
 ```task
-id: ADHOC-2026-07-02-T02
+id: NK-WP-ADHOC-2026-07-02-T02
 status: done
 priority: medium
 ```