security: scrub live credentials from tracked notes; point values at Vaultwarden

- replace real keys/passwords/tokens/connection strings with {{SECRET_*}}
  placeholders across 24 files (review-named 12 + noise-audit finds:
  WAQI/Dovecot/GPS/VPN subscriptions/Work runbooks/Plane API key)
- widen verifier: OPENSSH/RSA key headers, hyphenated sk-/prefixed sk-,
  credential assignments & table cells, telegram bot tokens, conn strings
- placeholder/default-value/config-name exemptions to kill doc FPs
- skip .obsidian plugin code and frozen Inbox-Clippings from value scan
- GIT_WORKFLOW: no git add ., verifier before commit, force-push exception
- final regression: 0 flagged in tracked scope (was 43)

03_Resources/Development/AI-ML/Zenmux-config.md

@@ -5,7 +5,7 @@ created: 2026-01-05
 
 coder ：
 ```
-sk-ai-v1-875cd41da6e117609e850e4c594d0116f2e128bee9bf6890eb6a48fe23e69764
+sk-ai-v1-{{SECRET_ZENMUX_CODER}}（实际值见 Vaultwarden）
 ```
 
 url:
@@ -23,12 +23,12 @@ https://zenmux.ai/api/vertex-ai
 
 obsidian:
 ```
-sk-ai-v1-82f1a2df15721ca5d5afc633842b91719fea95c6c449cbb78db0dd03f7ed1aa2
+sk-ai-v1-{{SECRET_ZENMUX_OBSIDIAN}}（实际值见 Vaultwarden）
 ```
 
 
 
 Clawdbot:
 ```
-sk-ai-v1-74be1c7baa2d45efcea213f3b3cfb7defc03c3e44044b26d9c289f32b156a199
+sk-ai-v1-{{SECRET_ZENMUX_CLAWDBOT}}（实际值见 Vaultwarden）
 ```