docs: complete authenticated API pilot

docs/workflow-discovery.md

@@ -162,19 +162,18 @@ and build configurations, then provide an activation command.
 
 ## Remaining pilots
 
-- Authorize the changed workbench `.envrc` and visually confirm its two MariaDB
-  examples. The four SOPS-derived Dadbod connections, both MongoDB connections,
-  and all four read-only example-query runs already passed. Add a Marimo report
-  only for a real cross-system investigation.
+- Visually confirm the two MariaDB examples in Dadbod. The workbench environment,
+  four SOPS-derived Dadbod connections, both MongoDB connections, all four
+  read-only example-query runs, and Kulala response chaining already passed. Add
+  a Marimo report only for a real cross-system investigation.
 - Add another ephemeral read-only rclone remote only when credentials for a new
   Leafcloud project become available. Irristaud listing has passed; do not upload.
 - Use the reviewed local Yookr OpenAPI contract while the accepted malformed
   generated test document remains deployed.
-- Finish only the notification, detach/reattach, and per-worktree direnv
-  observations for the Herdr pilot. Its Codex/Claude fallback, attention states,
-  local branches, parallel non-overlapping plans, and dirty-removal guard passed
-  with issue 197; the plans show that implementation belongs outside the
-  dashboard repository.
+- Finish only the notification and detach/reattach observations for the Herdr
+  pilot. Its Codex/Claude fallback, attention states, local branches, parallel
+  non-overlapping plans, and dirty-removal guard passed with issue 197; the plans
+  show that implementation belongs outside the dashboard repository.
 - Keep Bruno, DBeaver, and existing PIM clients until their independent gates are
   resolved.