security: scrub live credentials from tracked notes; point values at Vaultwarden

- replace real keys/passwords/tokens/connection strings with {{SECRET_*}}
  placeholders across 24 files (review-named 12 + noise-audit finds:
  WAQI/Dovecot/GPS/VPN subscriptions/Work runbooks/Plane API key)
- widen verifier: OPENSSH/RSA key headers, hyphenated sk-/prefixed sk-,
  credential assignments & table cells, telegram bot tokens, conn strings
- placeholder/default-value/config-name exemptions to kill doc FPs
- skip .obsidian plugin code and frozen Inbox-Clippings from value scan
- GIT_WORKFLOW: no git add ., verifier before commit, force-push exception
- final regression: 0 flagged in tracked scope (was 43)

02_Areas/GFW/Bills.md

@@ -14,7 +14,7 @@ https://laomaoyun.me/
 于 2023/04/15 到期，距离到期还有 31 天
 30元
 
-https://09.laomao1.xyz/api/v1/client/subscribe?token=daddf8de9b1e002478b6fc59a6760e85
+https://09.laomao1.xyz/api/v1/client/subscribe?token={{SECRET_VPN_LAOMAO1_SUBSCRIBE}}
 
 
 
@@ -77,7 +77,7 @@ https://subapi1.gardenparty.one/link/7662I1Snxww7zkgq?sub=3
 150g/14月
 
 https://dog1.ssrdog111.com/
-https://host.api-baobaog.rest/api/v1/client/subscribe?token=ab911d53f4ef8abb40da6fd6c5ab326d
+https://host.api-baobaog.rest/api/v1/client/subscribe?token={{SECRET_VPN_SSRDOG_SUBSCRIBE}}
 
 
 

02_Areas/Network & VPN/VPN-Subscriptions.md

@@ -13,7 +13,7 @@ https://laomaoyun.me/
 于 2023/04/15 到期，距离到期还有 31 天
 30元
 
-https://09.laomao1.xyz/api/v1/client/subscribe?token=daddf8de9b1e002478b6fc59a6760e85
+https://09.laomao1.xyz/api/v1/client/subscribe?token={{SECRET_VPN_LAOMAO1_SUBSCRIBE}}
 
 
 
@@ -76,7 +76,7 @@ https://subapi1.gardenparty.one/link/7662I1Snxww7zkgq?sub=3
 150g/14月
 
 https://dog1.ssrdog111.com/
-https://host.api-baobaog.rest/api/v1/client/subscribe?token=ab911d53f4ef8abb40da6fd6c5ab326d
+https://host.api-baobaog.rest/api/v1/client/subscribe?token={{SECRET_VPN_SSRDOG_SUBSCRIBE}}
 
 
 

02_Areas/Personal Development/remark42.md

@@ -32,5 +32,5 @@ ADMIN_SHARED_ID=github_20924f5ace2e27ff9b98801b837b8a495308d782
 
 ```text-plain
 NOTIFY_TYPE=telegram
-NOTIFY_TELEGRAM_TOKEN=1312138212:AAFhKNaLXTT1-cqPrcOiLTLKr3656uviRLE
+NOTIFY_TELEGRAM_TOKEN={{SECRET_TELEGRAM_REMARK42_BOT}}
 ```