fix(workplans): adopt ADR-007 derived identifiers for unregistered records

These workplans exist only in the retired local hub. Their random pre-ADR-007
identifiers are refused by C-06 as stale references, so they cannot be
registered. Deriving from the canonical record id takes no identity from
anything: central does not hold them and the old ids die with the cache.

Records central already holds were deliberately left untouched.

Refs CUST-WP-0068-T06

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006

workplans/USER-WP-0021-portal-product-expansion.md

@@ -12,7 +12,7 @@ updated: "2026-08-19"
 depends_on:
   - USER-WP-0020
   - TEN-WP-0005
-state_hub_workstream_id: "ba217f48-5fa5-4178-9c79-73aa225f3f2e"
+state_hub_workstream_id: "1f8ef8dd-b937-5601-8522-30eb7f7e0994"
 ---
 
 # USER-WP-0021 - Portal product expansion
@@ -26,7 +26,7 @@ holding the proven production MVP open. Activate according to tenant demand.
 id: USER-WP-0021-T01
 status: done
 priority: high
-state_hub_task_id: "342299b8-d9a3-408d-bf0d-914496714d5f"
+state_hub_task_id: "a3f20b37-6a6d-578c-8bdf-56ac73d98695"
 ```
 
 Add invitation claim/resend/expiry, platform tenant management and recovery
@@ -53,7 +53,7 @@ Broader tenant update/retirement operations remain.
 id: USER-WP-0021-T02
 status: done
 priority: medium
-state_hub_task_id: "dc548cfb-db7c-4cbd-864f-2effeebc3dbd"
+state_hub_task_id: "10426f13-0a1e-5ad6-bb86-dad4264f3774"
 ```
 
 Add invitation acceptance, email-verification status, consent/profile,
@@ -89,7 +89,7 @@ resume the durable journey. This completes the self-service onboarding scope.
 id: USER-WP-0021-T03
 status: done
 priority: high
-state_hub_task_id: "3e0b41ee-6159-46a4-a9fe-c5b6d714cc2a"
+state_hub_task_id: "37077db0-b53e-5671-9615-5adfc8053812"
 ```
 
 Add platform tenant creation, first-admin bootstrap, invitation/recovery
@@ -128,7 +128,7 @@ provider-neutral lifecycle ports, and redacted diagnostics.
 id: USER-WP-0021-T04
 status: done
 priority: high
-state_hub_task_id: "fb59245e-6989-4bd9-b72a-68e53ea9f0af"
+state_hub_task_id: "6aae1965-5ba2-58b4-a631-47cad0139e54"
 ```
 
 Automate duplicate/expired/replayed invitation, session expiry, provider
@@ -192,7 +192,7 @@ deployed and wants its own permission.
 id: USER-WP-0021-T05
 status: done
 priority: low
-state_hub_task_id: "05046780-9625-47c2-8caf-f57e9239c603"
+state_hub_task_id: "2d6b38c4-6007-58a3-aebe-09a90102ebec"
 ```
 
 When a tenant requires SAML/OIDC federation, SCIM, directory synchronization,