feat: advance database and Herdr pilots

docs/workflow-discovery.md

@@ -162,14 +162,19 @@ and build configurations, then provide an activation command.
 
 ## Remaining pilots
 
-- Activate and visually confirm the workbench's four SOPS-derived Dadbod
-  connections. Add a Marimo report only for a real cross-system investigation.
+- Authorize the changed workbench `.envrc` and visually confirm its two MariaDB
+  examples. The four SOPS-derived Dadbod connections, both MongoDB connections,
+  and all four read-only example-query runs already passed. Add a Marimo report
+  only for a real cross-system investigation.
 - Add another ephemeral read-only rclone remote only when credentials for a new
   Leafcloud project become available. Irristaud listing has passed; do not upload.
 - Use the reviewed local Yookr OpenAPI contract while the accepted malformed
   generated test document remains deployed.
-- Run the complete Herdr notification, fallback-agent, and safe worktree pilot
-  with a real Monday ticket.
+- Finish only the notification, detach/reattach, and per-worktree direnv
+  observations for the Herdr pilot. Its Codex/Claude fallback, attention states,
+  local branches, parallel non-overlapping plans, and dirty-removal guard passed
+  with issue 197; the plans show that implementation belongs outside the
+  dashboard repository.
 - Keep Bruno, DBeaver, and existing PIM clients until their independent gates are
   resolved.