secret-scan.acks

# Known NON-secret matches of scripts/secret-gate.mjs, one 16-hex fingerprint per line (a fingerprint is a one-way hash, never the value).
# Read from a COMMITTED tree only: an ack silences a push only if it travels in that push.
98d475d84887b871  # benchmarks/CoalLedger/fixtures/doc-leak/f04-mixed-leaks/RUNBOOK.md:34 - a placeholder token (ghp_ followed by x characters), the fixture the doc-leak canary must find