fix: remove secret-shaped release fixture

[chrisl10]

Outcome

Publishes the next immutable PRD-005 AgentCookie candidate as v1.1.0-codex.3 after the foundation secret scanner correctly rejected a synthetic credential-shaped URL in test source.

Changes

• preserves the same endpoint rejection test without a contiguous credential-shaped literal
• regenerates the reviewed product patch and patched-files manifest locks
• advances exact release identity from .2 to .3
• keeps protected-environment approval, reproducible builds, attestations, immutable release enforcement, and exact asset verification intact

Gates

• Security cycle 14: PASS
• Quality cycle 11: PASS
• exact candidate tree: 098a49396b93ee488963eca6a55b8db4a6f2ac0b
• patch: 0ffe4ca1888da2d05639d09e0dcb4f230090310eeddf50bd66cd43e1d70699a8
• manifest: 5654cfd4d9465235b952a4ed4b157f6cfa8745cdb60149c77a2bdfe7e1b52e45