fix(workplans): adopt ADR-007 derived identifiers for unregistered records

These workplans exist only in the retired local hub. Their random pre-ADR-007
identifiers are refused by C-06 as stale references, so they cannot be
registered. Deriving from the canonical record id takes no identity from
anything: central does not hold them and the old ids die with the cache.

Records central already holds were deliberately left untouched.

Refs CUST-WP-0068-T06

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006

workplans/NK-WP-0023-user-engine-portal-platform-integration.md

@@ -12,7 +12,7 @@ updated: "2026-07-30"
 depends_on:
   - USER-WP-0020
   - KEY-WP-0004
-state_hub_workstream_id: "c652e4ba-6520-4b30-966f-4fb5659439db"
+state_hub_workstream_id: "fdb3deee-06c3-5d12-91ce-9c50b2ac0618"
 ---
 
 # NK-WP-0023 - user-engine portal platform integration
@@ -27,7 +27,7 @@ as the first acceptance case.
 id: NK-WP-0023-T01
 status: done
 priority: high
-state_hub_task_id: "8d96aa5e-9801-4d76-9140-d6076a4f2942"
+state_hub_task_id: "05d69347-ec34-59b7-a107-80db015ef0e6"
 ```
 
 Ratify lifecycle sequencing and compensation across user-engine, LLDAP,
@@ -43,7 +43,7 @@ now so later enterprise directories do not require a domain rewrite.
 id: NK-WP-0023-T02
 status: done
 priority: high
-state_hub_task_id: "89fe51aa-f351-4763-a358-3eec79f28350"
+state_hub_task_id: "22113719-905b-54df-9ecb-0a0c456e0d35"
 ```
 
 Implement idempotent create/link/suspend/reactivate/deprovision operations for
@@ -77,7 +77,7 @@ and accepted the repeated deletion. The probe identity was removed.
 id: NK-WP-0023-T03
 status: done
 priority: high
-state_hub_task_id: "76289890-6e6e-45ea-90dc-d3d58eee8b62"
+state_hub_task_id: "5721c5f9-6161-522c-a439-95f2613b5460"
 ```
 
 Register the portal OIDC client with authorization code + PKCE, configure
@@ -140,7 +140,7 @@ errors, so future users may enter either `bernd.worsch` or the full email.
 id: NK-WP-0023-T04
 status: done
 priority: high
-state_hub_task_id: "6ce33c92-031a-4f23-8ee2-108451b394fe"
+state_hub_task_id: "efad8829-5d75-5ea1-9564-1618b1846525"
 ```
 
 Define and implement flex-auth resources/actions for self, tenant-admin, and
@@ -155,7 +155,7 @@ delivery with replay and dead-letter evidence.
 id: NK-WP-0023-T05
 status: done
 priority: high
-state_hub_task_id: "4ef00e05-1259-4c76-a8ef-ec40b5facd1c"
+state_hub_task_id: "0c454447-c14f-586b-835b-4f00d43943d0"
 ```
 
 Package the portal as a managed platform workload on the default
@@ -226,7 +226,7 @@ value entered recorded output. All T05 acceptance criteria are complete.
 id: NK-WP-0023-T06
 status: done
 priority: high
-state_hub_task_id: "96a7cd2b-6cab-47ab-a899-44bc0f6da58c"
+state_hub_task_id: "f5f0d5d0-09fa-59de-b83f-7a6d4ff736a8"
 ```
 
 Run end-to-end conformance for registration, login, MFA, tenant creation,
@@ -256,7 +256,7 @@ and the remaining browser/provider-outage matrix keep T06 open.
 id: NK-WP-0023-T07
 status: done
 priority: high
-state_hub_task_id: "a574dcec-f7cd-417b-aeaa-5392a7428241"
+state_hub_task_id: "04664946-c38d-50e8-bc3f-5533801494d8"
 ```
 
 Use the production portal to onboard
@@ -284,7 +284,7 @@ Administration of both `tenant:platform` and `tenant:coulomb` was denied.
 id: NK-WP-0023-T08
 status: done
 priority: medium
-state_hub_task_id: "7ef8e1f5-1a0e-4a34-9535-708e3146ae72"
+state_hub_task_id: "83a00e26-aab9-51f1-afb4-cb5d354ab436"
 ```
 
 Document later adapters for customer IdPs/directories, SAML/OIDC federation,