chore: session-3 backlog to Redmine #943, JOURNAL records line

WORKING.md unchecked tasks moved to Redmine per doctrine; JOURNAL
carries its records pointer for the docs cross-link rule.

WORKING.md

@@ -5,9 +5,5 @@ The human decides when the work is "done".
 
 ## Current Tasks
 
-- [ ] Add update_item() to bw_helper.py (root cause of credential deletion)
-- [ ] Fix --enable-2fa to update item in place, never create duplicates
-- [ ] Add duplicate-prevention safeguard to create_item()
-- [ ] Write credential lifecycle tests (create, read, update, never delete)
-- [ ] Verify 2FA is enabled and working end-to-end
-- [ ] Update STATUS.md
+(none — session-3 bw_helper backlog moved to Redmine #943:
+https://projects.knownelement.com/issues/943)

docs/JOURNAL.md

@@ -135,3 +135,7 @@ first. Forced-2FA screen says "Set up passkey" (profile says "Setup")
   "The authorization request was denied." until granted (same class as
   the session-2 Redmine blocker).
 - vp-techops stale Gitea tokens cleanup still pending.
+
+---
+
+**Records:** Redmine #942 - https://projects.knownelement.com/issues/942 - Discourse docs home: https://community.turnsys.com