security: scrub live credentials from tracked notes; point values at Vaultwarden

- replace real keys/passwords/tokens/connection strings with {{SECRET_*}}
  placeholders across 24 files (review-named 12 + noise-audit finds:
  WAQI/Dovecot/GPS/VPN subscriptions/Work runbooks/Plane API key)
- widen verifier: OPENSSH/RSA key headers, hyphenated sk-/prefixed sk-,
  credential assignments & table cells, telegram bot tokens, conn strings
- placeholder/default-value/config-name exemptions to kill doc FPs
- skip .obsidian plugin code and frozen Inbox-Clippings from value scan
- GIT_WORKFLOW: no git add ., verifier before commit, force-push exception
- final regression: 0 flagged in tracked scope (was 43)

03_Resources/Development/AI-ML/Azure-config.md

@@ -2,11 +2,11 @@
 created: 2026-01-05
 ---
 
-key : 272f337c0d2c4407b930bde5e9846072
+key : {{SECRET_AZURE_OPENAI_MYCHATGPT}}（实际值见 Vaultwarden）
 endpoint: https://my-chatgpt.openai.azure.com/
 
 ```bash
-export AZURE_OPENAI_API_KEY="272f337c0d2c4407b930bde5e9846072"
+export AZURE_OPENAI_API_KEY="{{SECRET_AZURE_OPENAI_MYCHATGPT}}"
 export AZURE_OPENAI_ENDPOINT="https://my-chatgpt.openai.azure.com/"
 ```
 ```
@@ -14,7 +14,7 @@ export AZURE_OPENAI_ENDPOINT="https://my-chatgpt.openai.azure.com/"
 ```.env
 # ChatGPT Settings (required)
 # Set the API Key from OpenAI
-OPENAI_API_KEY=272f337c0d2c4407b930bde5e9846072
+OPENAI_API_KEY={{SECRET_AZURE_OPENAI_MYCHATGPT}}
 # To use Azure OpenAI API, set `OPENAI_AZURE` to true and `CHATGPT_REVERSE_PROXY` to your completion endpoint
 # OPENAI_AZURE=false
 OPENAI_AZURE=true

03_Resources/Development/AI-ML/Nvidia-config.md

@@ -11,7 +11,7 @@ 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
 use glm 4.7
 ```bash
 export ANTHROPIC_BASE_URL=http://localhost:3001
-export ANTHROPIC_AUTH_TOKEN=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
+export ANTHROPIC_AUTH_TOKEN=nvapi-{{SECRET_NVIDIA_API_KEY}}（实际值见 Vaultwarden）
 export ANTHROPIC_DEFAULT_HAIKU_MODEL=z-ai/glm4.7
 export ANTHROPIC_DEFAULT_SONNET_MODEL=z-ai/glm4.7
 export ANTHROPIC_DEFAULT_OPUS_MODEL=z-ai/glm4.7

03_Resources/Development/AI-ML/Zenmux-config.md

@@ -5,7 +5,7 @@ created: 2026-01-05
 
 coder ：
 ```
-sk-ai-v1-875cd41da6e117609e850e4c594d0116f2e128bee9bf6890eb6a48fe23e69764
+sk-ai-v1-{{SECRET_ZENMUX_CODER}}（实际值见 Vaultwarden）
 ```
 
 url:
@@ -23,12 +23,12 @@ https://zenmux.ai/api/vertex-ai
 
 obsidian:
 ```
-sk-ai-v1-82f1a2df15721ca5d5afc633842b91719fea95c6c449cbb78db0dd03f7ed1aa2
+sk-ai-v1-{{SECRET_ZENMUX_OBSIDIAN}}（实际值见 Vaultwarden）
 ```
 
 
 
 Clawdbot:
 ```
-sk-ai-v1-74be1c7baa2d45efcea213f3b3cfb7defc03c3e44044b26d9c289f32b156a199
+sk-ai-v1-{{SECRET_ZENMUX_CLAWDBOT}}（实际值见 Vaultwarden）
 ```

03_Resources/Development/AI-ML/mcp-config.md

@@ -5,6 +5,6 @@ created: 2026-01-05
 
 context7 mcp key:
 ```
-ctx7sk-92c2c98e-817e-41d4-bb85-94824444e2bf
+ctx7sk-{{SECRET_CONTEXT7_MCP}}（实际值见 Vaultwarden）
 ```