chore(work): finish 07-gitleaks-precommit

docs/work/_state.json

@@ -1,5 +1,5 @@
 {
-  "updated_at": "2026-05-14T17:56:41.640Z",
+  "updated_at": "2026-05-14T18:01:17.746Z",
   "epics": {
     "2026-05-13-binder-wrap-helper": {
       "status": "done",
@@ -110,10 +110,10 @@
           ]
         },
         "07-gitleaks-precommit": {
-          "status": "todo",
+          "status": "done",
           "title": "Gitleaks pre-commit hook",
           "ac_total": 1,
-          "ac_completed": 0,
+          "ac_completed": 1,
           "depends_on": [],
           "blocks": [
             "09-ci-security-guide-and-docs"
@@ -258,11 +258,6 @@
     }
   },
   "ready": [
-    {
-      "epic": "2026-05-14-ci-security-and-supply-chain",
-      "story": "07-gitleaks-precommit",
-      "title": "Gitleaks pre-commit hook"
-    },
     {
       "epic": "2026-05-14-ci-security-and-supply-chain",
       "story": "08-reviewer-prompt-update",