feat: add wizard auth selector

TASKS.md

@@ -2,20 +2,20 @@
 
 ## Current
 
-### `feat/secrets-ui`
+### `feat/wizard-auth-selector`
 
 Status: completed
 
 DoD:
-- separate `Secrets` page exists next to `API Keys`
-- UI supports list/create/rotate/delete for workspace secrets on live backend endpoints
-- UI shows read-only auth profile usage references for each secret
-- no UI flow pretends to reveal plaintext after create/rotate when backend does not return it
+- wizard step 2 uses auth selector instead of `${secrets.*}` placeholders
+- upstream auth is serialized into `execution_config.auth_profile_ref`
+- raw auth headers are removed from primary wizard UX
+- quick-create secret and auth profile flow works against live backend endpoints
 - node checks, UI docker build, and workspace check pass
 
 ## Next
 
-- `feat/wizard-auth-selector`
+- `feat/manual-regression-pass`
 
 ## Backlog