fix(workplans): qualify ad-hoc identifiers with the repository prefix

`ADHOC-YYYY-MM-DD` is unique per date but not per repository, so any two repos
opening an ad-hoc on the same day collide. The 2026-08-26 fleet projection
reset refused 9 records for exactly this reason.

Canon (work-record-types_v0.1, CUST-WP-0066) settled the form as
`{PREFIX}-WP-ADHOC-YYYY-MM-DD`, filename unchanged, and grandfathered existing
ids on the condition they are never *silently* re-derived. This is the explicit
migration that clause allows for.

The hub id is derived from the record id, so a changed id is a different
record: stale state_hub_*_id fields are dropped and fix-consistency re-derives.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006

workplans/ADHOC-2026-06-27.md

@@ -1,5 +1,5 @@
 ---
-id: ADHOC-2026-06-27
+id: WARDEN-WP-ADHOC-2026-06-27
 type: workplan
 title: "Ad Hoc Tasks — 2026-06-27"
 domain: infotech
@@ -9,7 +9,6 @@ owner: claude
 topic_slug: custodian
 created: "2026-06-27"
 updated: "2026-06-27"
-state_hub_workstream_id: "142b171b-c34b-4a45-91a5-c77e6d07ec6f"
 ---
 
 # Ad Hoc Tasks — 2026-06-27
@@ -19,10 +18,9 @@ Low-risk opportunistic fixes completed directly during the consolidation session
 ### T01 — Fix stale `warden` CLI install + make it usable outside the repo
 
 ```task
-id: ADHOC-2026-06-27-T01
+id: WARDEN-WP-ADHOC-2026-06-27-T01
 status: done
 priority: medium
-state_hub_task_id: "867c72c9-9904-400f-8542-04264e5856c2"
 ```
 
 issue-core reported (msg `70bcf238`) that the `warden` CLI on `~/.local/bin` lacked

workplans/ADHOC-2026-06-29.md

@@ -1,5 +1,5 @@
 ---
-id: ADHOC-2026-06-29
+id: WARDEN-WP-ADHOC-2026-06-29
 type: workplan
 title: "Ad Hoc Tasks — 2026-06-29"
 domain: infotech
@@ -9,7 +9,6 @@ owner: claude
 topic_slug: custodian
 created: "2026-06-29"
 updated: "2026-06-29"
-state_hub_workstream_id: "1c0460b7-bc8a-48db-96d4-681bce18ac91"
 ---
 
 # Ad Hoc Tasks — 2026-06-29
@@ -17,10 +16,9 @@ state_hub_workstream_id: "1c0460b7-bc8a-48db-96d4-681bce18ac91"
 ### T01 — Joint-smoke mode for the deployed flex-auth (assist FLEX-WP-0007 T4)
 
 ```task
-id: ADHOC-2026-06-29-T01
+id: WARDEN-WP-ADHOC-2026-06-29-T01
 status: done
 priority: medium
-state_hub_task_id: "371235cc-b9d3-4103-b09f-e4e01cc83c5b"
 ```
 
 flex-auth (msg `ea00620b`) asked ops-warden to help close FLEX-WP-0007 T4 (joint OpenBao

workplans/ADHOC-2026-08-11.md

@@ -1,5 +1,5 @@
 ---
-id: ADHOC-2026-08-11
+id: WARDEN-WP-ADHOC-2026-08-11
 type: workplan
 title: "Ad Hoc Tasks — 2026-08-11"
 domain: infotech
@@ -9,7 +9,6 @@ owner: claude
 topic_slug: custodian
 created: "2026-08-11"
 updated: "2026-08-15"
-state_hub_workstream_id: "bc6dd3e3-ab2b-567a-9574-30d2650f20a2"
 ---
 
 # Ad Hoc Tasks — 2026-08-11
@@ -17,10 +16,9 @@ state_hub_workstream_id: "bc6dd3e3-ab2b-567a-9574-30d2650f20a2"
 ### T01 — Repair stale `rapp-qonto-keycape-client` wiki anchor (restore green routing suite)
 
 ```task
-id: ADHOC-2026-08-11-T01
+id: WARDEN-WP-ADHOC-2026-08-11-T01
 status: done
 priority: medium
-state_hub_task_id: "ddd0c95c-1196-5251-a4ca-6ef441c2f377"
 ```
 
 rapp-postgres (msg `96907986`, residual from RAPP-POSTGRES-WP-0002-T04) reported the
@@ -39,10 +37,9 @@ an anchor that does not exist. The intended heading is `## Routing catalog index
 ### T02 — Triage the stale ops-warden inbox (11 unread, C-28/C-29)
 
 ```task
-id: ADHOC-2026-08-11-T02
+id: WARDEN-WP-ADHOC-2026-08-11-T02
 status: done
 priority: medium
-state_hub_task_id: "fda35ad4-f526-5012-a2be-ef6b5dcbc8af"
 ```
 
 `fix-consistency` flagged 11 unread messages older than 3 days, two of them as possible
@@ -73,10 +70,9 @@ read. Inbox is now empty.
 ### T03 — warden-sign AppRole: PARKED pending WP-0027 break-glass + ops-bridge cutover
 
 ```task
-id: ADHOC-2026-08-11-T03
+id: WARDEN-WP-ADHOC-2026-08-11-T03
 status: done
 priority: medium
-state_hub_task_id: "7ef4b6b0-26bf-5456-8429-8cf8458c2ddc"
 ```
 
 secrets-engine (msg `80456912`, 2026-06-29) is holding a validated non-mutating dry-run

workplans/ADHOC-2026-08-17.md

@@ -1,5 +1,5 @@
 ---
-id: ADHOC-2026-08-17
+id: WARDEN-WP-ADHOC-2026-08-17
 type: workplan
 title: "Ad Hoc Tasks — 2026-08-17"
 domain: infotech
@@ -9,7 +9,6 @@ owner: claude
 topic_slug: custodian
 created: "2026-08-17"
 updated: "2026-08-17"
-state_hub_workstream_id: "8376eb89-36f2-52b0-a59a-2954b2e49349"
 ---
 
 # Ad Hoc Tasks — 2026-08-17
@@ -21,10 +20,9 @@ workload-identity owner.
 ### T01 — Answer flex-auth: how should `/v1/check` authenticate its callers?
 
 ```task
-id: ADHOC-2026-08-17-T01
+id: WARDEN-WP-ADHOC-2026-08-17-T01
 status: done
 priority: high
-state_hub_task_id: "b980d1f7-2fcc-58dd-97d8-6e9b9ba57bc9"
 ```
 
 flex-auth (msg `130a148c`, FLEX-WP-0015 T02) reported that `POST /v1/check` and
@@ -69,10 +67,9 @@ Their four questions answered in `wiki/NetKingdomSecurityMap.md`
 ### T02 — user-engine: USER_ENGINE_PROXY_SECRET stays railiance-apps; record consumer-only
 
 ```task
-id: ADHOC-2026-08-17-T02
+id: WARDEN-WP-ADHOC-2026-08-17-T02
 status: done
 priority: medium
-state_hub_task_id: "e76b9b3e-189b-5a4f-8815-4ccf2057507c"
 ```
 
 user-engine (msg `2af4a124`) answered the open confirm question on
@@ -95,10 +92,9 @@ consumes it and has no authority over custody, rotation, or issuance.
 ### T03 — key-cape: `rapp-qonto-keycape-client` interim accepted; refresh the blocker
 
 ```task
-id: ADHOC-2026-08-17-T03
+id: WARDEN-WP-ADHOC-2026-08-17-T03
 status: done
 priority: medium
-state_hub_task_id: "edfb0626-5022-5f49-aaf9-08e0d1002b90"
 ```
 
 key-cape (msg `099b7cba`) acknowledged the lane staying interim on ops-warden.
@@ -118,10 +114,9 @@ workplan.
 ### T04 — Session hygiene
 
 ```task
-id: ADHOC-2026-08-17-T04
+id: WARDEN-WP-ADHOC-2026-08-17-T04
 status: done
 priority: low
-state_hub_task_id: "62109af6-f095-5e7b-9258-0fcec29d30e8"
 ```
 
 - [x] `uv run pytest -q` → 338 passed, 4 deselected (routing anchor + no-double-source