fix(workplans): adopt ADR-007 derived identifiers for unregistered records

These workplans exist only in the retired local hub. Their random pre-ADR-007
identifiers are refused by C-06 as stale references, so they cannot be
registered. Deriving from the canonical record id takes no identity from
anything: central does not hold them and the old ids die with the cache.

Records central already holds were deliberately left untouched.

Refs CUST-WP-0068-T06

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006

workplans/WARDEN-WP-0031-policy-caller-identity.md

@@ -14,7 +14,7 @@ related_workplans:
   - WARDEN-WP-0009
 created: "2026-08-19"
 updated: "2026-08-19"
-state_hub_workstream_id: "7284a398-d529-4fe3-871e-e2505064be5e"
+state_hub_workstream_id: "739bad25-2345-5f4f-aaa3-cc4cd8c71f6c"
 ---
 
 # WARDEN-WP-0031 — Calling-side identity for flex-auth
@@ -64,7 +64,7 @@ point argument, applied to ops-warden as a caller).
 id: WARDEN-WP-0031-T01
 status: done
 priority: high
-state_hub_task_id: "cd65c834-214a-4bbb-92e4-262f124fc79d"
+state_hub_task_id: "d3b7c701-bcdd-53f9-aa72-6f289bf5909b"
 ```
 
 **Caller identity on the outbound policy call.** `policy.caller_auth` in
@@ -82,7 +82,7 @@ until an operator opts in. Tests in `tests/test_policy.py`.
 id: WARDEN-WP-0031-T02
 status: done
 priority: high
-state_hub_task_id: "9abdeb78-bbbb-4ff5-b3d7-5646116cf68b"
+state_hub_task_id: "b77b3c80-a168-564a-9b7f-3063aefc3c2e"
 ```
 
 **Readiness gate.** `scripts/check_policy_caller_identity.py` — read-only:
@@ -99,7 +99,7 @@ Done 2026-08-19.
 id: WARDEN-WP-0031-T03
 status: done
 priority: medium
-state_hub_task_id: "d3ff2ae1-2dac-45d0-b229-8b23c27c3972"
+state_hub_task_id: "4245155e-6c71-5425-b574-11f61e1d4461"
 ```
 
 **Docs.** `examples/warden.production.example.yaml` gains the `caller_auth`
@@ -114,7 +114,7 @@ Done 2026-08-19.
 id: WARDEN-WP-0031-T04
 status: done
 priority: high
-state_hub_task_id: "3d9d1a05-adea-4dcb-b71b-bfb2235aa198"
+state_hub_task_id: "f3834af7-2a08-51dd-bf31-8ce8550de699"
 ```
 
 **Pick the token source and prove it against the warn pin.** Operator work on
@@ -141,7 +141,7 @@ Evidence: `history/2026-08-19-flex-auth-caller-identity-evidence.md`.
 id: WARDEN-WP-0031-T05
 status: cancel
 priority: high
-state_hub_task_id: "8b8e68c4-587d-490d-a98f-840aaff0fdb8"
+state_hub_task_id: "3f6dc609-89db-52eb-a6f9-d2fd271be821"
 ```
 
 **Sequence the flip.** Only after T04: tell flex-auth to set