Replace the compromised committed Guardian secret with an obviously-fake dev-only value. Prod reads GUARDIAN_SECRET_KEY from env and raises (Phase 1, already merged); this removes the dead literal from the repo entirely. Ref: arcadia-core/docs/GUARDIAN_SECRET_ROTATION.md Phase 4.