F-002 fix: Remove secrets and externalize config

work/artifacts/F-002/leader-close.json

@@ -0,0 +1,14 @@
+{
+  "feature_id": "F-002",
+  "agent": "leader",
+  "verdict": "APPROVED",
+  "summary": "All required non-leader gates are approved for F-002. Feature is accepted for final publish with shared config loader, tracked secret removal, and green harness verification.",
+  "evidence": [
+    "Reviewed work/artifacts/F-002/reviewer.json -> APPROVED",
+    "Reviewed work/artifacts/F-002/security.json -> APPROVED",
+    "Reviewed work/artifacts/F-002/qa.json -> APPROVED",
+    "Reviewed work/artifacts/F-002/documenter.md",
+    "Ran ./scripts/verify.sh -> OK"
+  ],
+  "timestamp": "2026-05-25T06:00:00Z"
+}