analysis: correct the reach of the timestamp exposure

The Gitea mirror is private to the owner. An earlier draft inferred
'public' from an anonymous git ls-remote succeeding on the owner's
machine, which does not follow -- corrected in F-002, F-003, F-006,
REPORT.md and HANDOFF.md.

The exposure is prospective and sits on the git.lab side: content there
may later be pushed to GitHub. No such path is configured today (no
remote besides origin, no github.com reference in any of the six CI
configs). The severity ranking is unchanged and its reasoning is now
stated: a protection believed present but absent is what would make a
later outward push unsafe.

analysis/findings/F-006-stale-branches-publish-pre-rewrite-history.md

@@ -1,4 +1,4 @@
-# F-006: Three abandoned branches keep publishing exactly what the rewrite removed from main
+# F-006: Three abandoned branches still carry exactly what the rewrite removed from main
 
 category: dead-artifact
 confidence: high
@@ -9,12 +9,12 @@ evidence:
   no). All 41 carry real clock times (00h–01h and 21h–23h heavy). They are the *pre-rewrite*
   versions of commits the mapping table lists as replaced — 42 mapping rows resolve as
   `ok-both-present` in `analysis/data/sha_refs.tsv`, meaning the old SHA is still reachable.
-- The same branch exists on the public mirror:
+- The same branch exists on the Gitea mirror (private to the owner, see F-002):
   `git ls-remote https://rohana.axion1337.de/sorb/axion1337.chat-gitops.git` ->
   `f30d2f582ba14d85a7dec97c4db9bb2677ca824d refs/heads/turn-secret-rotation-20260728-192656`,
   identical to git.lab.
 - `threadnet-call` `origin/livekit`: 14 own commits with real clock times, head `c12a4116`
-  (2026-07-31 22:22), mirrored publicly with the same head.
+  (2026-07-31 22:22), mirrored with the same head.
 - `axion1337.chat-gitops` `origin/wiki`: head `0ff598e`, 2026-05-14. `CLAUDE.md:63` already
   describes it as "ein überholter Mai-Abzug von `docs/`", and management#19 ("DOC-02:
   Veralteten `wiki`-Branch im gitops-Repo entfernen?") tracks it — open, `priority:low`,
@@ -25,7 +25,8 @@ evidence:
 
 impact: The single most expensive operation in this repo's history — a 251-commit rewrite
 that restarted three release pipelines and needed its own mapping document — is undone for
-42 of those commits by a branch nobody looks at, on a host that is public. The `wiki` branch
+42 of those commits by a branch nobody looks at, and the branch travels with every mirror
+and every future clone or push of that repo. The `wiki` branch
 additionally offers a three-month-old copy of the documentation next to the current one,
 which is the "zwei Wahrheiten über dieselbe Sache" failure `CLAUDE.md:94-97` names as worse
 than an incomplete one.