Secret detection heuristics

A redaction placeholder became a primary key, and it closed other people's promises

One catch-all regex rewrote long task slugs to TOKEN_REDACTED, a ledger keyed accounts on that constant, and a single done line marked two owners' work finished.