fix(bootstrap): all password-auth systems bootstrapped — tsys-siem done [#403]

tsys-siem verified SSHOK + SUDOOK via access-matrix probe. With this
landing, 69/70 non-excluded systems are at intended access state; the
sole remaining gap (stlp-3dscanner) is deferred to [#417]. Strip the
now-empty active-target section from bootstrap-all.sh.

💘 Generated with Crush

Assisted-by: Crush:glm-5.2

WORKING.md

@@ -7,6 +7,5 @@ A commit is blocked while any task below remains unchecked.
 
 (all done — session complete)
 
-- [x] Add NON-NEGOTIABLE session-start check-for-understanding gate to AGENTS.md
-- [x] Run full end-to-end access validation (68/70 non-excluded at intended state)
-- [x] Update bootstrap-all.sh to target only remaining system (tsys-siem) [#403]
+- [x] Validate tsys-siem access (SSHOK + SUDOOK confirmed)
+- [x] Update bootstrap-all.sh: no remaining password-auth targets [#403]