chore(wp-0001): close State Hub bootstrap workplan; de-template repo identity

- repo-identity.md / repo-boundary.md: replace leftover repo-seed template text
  with secrets-engine identity and boundary (T01)
- mark SECRETS-WP-0001 T01–T03 done (T02 dev-workflow commands and T03 first real
  workplan were completed during the MVP build); workplan status -> finished

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.claude/rules/repo-boundary.md

@@ -1,8 +1,12 @@
 ## Repo boundary
 
-This repo owns **Repo Seed** only. It does not own:
+This repo owns the **secrets-engine** workflow/interaction layer only. It does
+not own:
 
-<!-- TODO: List what belongs in adjacent repos, e.g.:
-- SSH key management → railiance-infra/
-- State hub code     → state-hub/
--->
+- Secret custody, policy, lease, and audit backend → OpenBao / railiance-platform
+- SSH certificate issuance → ops-warden (`warden sign`)
+- Tunnels and remote transport → ops-bridge
+- Authorization decisions → flex-auth
+- Identity and claim lifecycle → user-engine / key-cape
+- Cross-system security boundary doc → net-kingdom/docs/
+- Request history and progress index → State Hub (read model)

.claude/rules/repo-identity.md

@@ -1,5 +1,7 @@
-**Purpose:** Git repository template to bootstrap coulomb projects.
+**Purpose:** OpenBao-backed secrets workflow and automation layer for approved
+secret custody, delivery, and lifecycle work across build, test, and production.
 
 **Domain:** infotech
-**Repo slug:** repo-seed
+**Repo slug:** secrets-engine
 **Topic ID:** cee7bedf-2b48-46ef-8601-006474f2ad7a
+**Workplan prefix:** SECRETS-WP-

workplans/SECRETS-WP-0001-statehub-bootstrap.md

@@ -4,7 +4,7 @@ type: workplan
 title: "Bootstrap State Hub integration"
 domain: infotech
 repo: secrets-engine
-status: ready
+status: finished
 owner: codex
 topic_slug: custodian
 created: "2026-06-28"
@@ -20,7 +20,7 @@ secrets-engine is a headless, multi-application, multi-tenant secrets workflow a
 
 ```task
 id: SECRETS-WP-0001-T01
-status: todo
+status: done
 priority: high
 state_hub_task_id: "e93ea995-8c3b-4892-ab09-70cf7e0a0346"
 ```
@@ -32,7 +32,7 @@ Replace generated placeholders with repo-specific facts where needed.
 
 ```task
 id: SECRETS-WP-0001-T02
-status: todo
+status: done
 priority: high
 state_hub_task_id: "3269b817-6e10-4e9f-804f-73a8b1ded920"
 ```
@@ -45,7 +45,7 @@ changes confidently.
 
 ```task
 id: SECRETS-WP-0001-T03
-status: todo
+status: done
 priority: medium
 state_hub_task_id: "62de7242-1a4c-4ed0-a4e4-ebe17bcc06b6"
 ```