security: sanitize auth token from README

README.md

@@ -7,6 +7,8 @@ Persistent memory for Bryan Gilliom via the goldbrain Obsidian vault over the Lo
 **Repo:** https://git.mpm.to/mpm/goldbrain-memory  
 **CoWork Project:** CW-022 — Goldbrain Memory
 
+> **Security note:** This repo contains sanitized documentation only. The bearer token and fully configured  file are stored privately in the CoWork  folder (Bryan Gilliom, Google Drive). Do not commit credentials here.
+
 ---
 
 ## Overview
@@ -28,7 +30,7 @@ goldbrain-memory gives Claude durable, cross-session memory by reading from and
 | Field | Value |
 |---|---|
 | Base URL | `https://goldbrainapi.mpm.to` |
-| Auth | `Authorization: Bearer fb72065a05fabb28ae87c45880cc3b7aba4fd3f58e70297934145cef974e8ed8` |
+| Auth | `Authorization: Bearer <OBSIDIAN_BEARER_TOKEN>` |
 | TLS | Valid cert — no `-k` flag needed |
 | Transport | HTTPS REST (Obsidian Local REST API plugin) |
 
@@ -108,7 +110,7 @@ No server to install. The vault REST API is already running at `goldbrainapi.mpm
 
 ### Checklist
 - [ ] Install `goldbrain-memory.plugin` in CoWork
-- [ ] Verify vault is reachable: `curl -s -H "Authorization: Bearer fb72065a05fabb28ae87c45880cc3b7aba4fd3f58e70297934145cef974e8ed8" https://goldbrainapi.mpm.to/vault/BOOTSTRAP.md | head -5`
+- [ ] Verify vault is reachable: `curl -s -H "Authorization: Bearer <OBSIDIAN_BEARER_TOKEN>" https://goldbrainapi.mpm.to/vault/BOOTSTRAP.md | head -5`
 - [ ] Confirm `BOOTSTRAP.md`, `_agent/memory/semantic/operator-preferences.md`, and `_agent/context/current-context.md` exist (404 = vault not bootstrapped; see references/bootstrap.md)
 
 ---
@@ -129,3 +131,4 @@ No server to install. The vault REST API is already running at `goldbrainapi.mpm
 
 - CoWork (Claude Desktop with plugin support)
 - Obsidian running on backend with [Local REST API plugin](https://github.com/coddingtonbear/obsidian-local-rest-api) active and reverse-proxied to `goldbrainapi.mpm.to`
+