fix(workplans): adopt ADR-007 derived identifiers for unregistered records

These workplans exist only in the retired local hub. Their random pre-ADR-007
identifiers are refused by C-06 as stale references, so they cannot be
registered. Deriving from the canonical record id takes no identity from
anything: central does not hold them and the old ids die with the cache.

Records central already holds were deliberately left untouched.

Refs CUST-WP-0068-T06

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006

workplans/RPF-WP-0020-ccr-schema-drift.md

@@ -13,7 +13,7 @@ related:
   - RPF-WP-0014
 origin: residual
 origin_ref: RPF-WP-0019
-state_hub_workstream_id: "e2da7c94-0693-40fa-a339-1873b7dd061a"
+state_hub_workstream_id: "99bdb617-b577-5de3-a9d8-4990ac676e28"
 ---
 
 # RPF-WP-0020 — CCR schema drift
@@ -78,7 +78,7 @@ draft and a real gap produce identical output.
 id: RPF-WP-0020-T01
 status: done
 priority: high
-state_hub_task_id: "3bf8bf9c-ac33-4ce7-8b3f-5b40135b227c"
+state_hub_task_id: "4763622c-78aa-556a-ba8e-9b556a2e78fc"
 ```
 **Migrate CCR-2026-0010 to the current schema.** Determine the actual
 authentication path for the `email-connect` transactional lane — Kubernetes
@@ -101,7 +101,7 @@ out of scope. No Secret value was read.
 id: RPF-WP-0020-T02
 status: done
 priority: medium
-state_hub_task_id: "12933d69-82a3-470d-b01c-0c40c28a7984"
+state_hub_task_id: "a897b2f5-b7ae-5dbf-9f51-54b2db5ca6fc"
 ```
 **Give the suite a way to express a draft.** Add an explicit in-flight state
 so `CCR-2026-0011` is skipped *by declaration* rather than by exception list —
@@ -120,7 +120,7 @@ metadata or filling credential placeholders.
 id: RPF-WP-0020-T03
 status: done
 priority: medium
-state_hub_task_id: "da52b518-c6fb-40b8-acb9-c64724ca4eee"
+state_hub_task_id: "44959415-a917-5dfb-a5ab-80ab166b9096"
 ```
 **Report the drift rather than only fixing it.** If the `openbao.auth`
 requirement was added without migrating existing active CCRs, other repos
@@ -137,7 +137,7 @@ now documented locally.
 id: RPF-WP-0020-T04
 status: done
 priority: low
-state_hub_task_id: "2259ee69-4914-42c4-9175-8c61b2206888"
+state_hub_task_id: "d85eeb8a-3147-59e1-bc2a-e84244dde93d"
 ```
 **Make the suite green and keep it that way.** With T01 and T02 done, the full
 suite passes. Record in `docs/credential-change-approval.md` that a new