ork ships three secret-redaction layers. Before this fix all three knew GitHub, Slack, AWS, OpenAI and Anthropic prefixes and none knew GitLab's gl<kind>- family, even though ork drives glab for merge-request flows. Type or pick a line and compare the two pattern sets. The regexes are the shipped ones, copied verbatim from secret-handler/patterns.ts. Samples are synthetic; the GitHub one is deliberately too short to be a real token shape.