Resync hq ADR references 0044-0054 -> 0039-0049 after the hq record reconciliation

modules/mosquitto/provisioner/index.ts

@@ -1,13 +1,13 @@
 // mosquitto's provisioner — the adapter that makes mosquitto a provider of the mesh `mqtt-topic`
 // interface. The reconcile loop, the contributions file, and reading the mesh's minted password are
 // the sdk harness's; this writes only the per-service half: how mosquitto creates and removes a
-// per-consumer MQTT client (novox/hq ADR 0044/0045/0053).
+// per-consumer MQTT client (novox/hq ADR 0039/0040/0048).
 //
 // The `mqtt-topic` interface: a consumer connects as `as` with the password the mesh minted, and
 // publishes and subscribes under `<as>/#`, isolated from every other consumer by a Dynamic Security
 // role scoped to exactly that subtree.
 //
-// **The login and password are the mesh's, not the provisioner's (ADR 0053).** The mesh derives the
+// **The login and password are the mesh's, not the provisioner's (ADR 0048).** The mesh derives the
 // login and hands it to both ends so they agree, and mints the password and delivers a copy to each.
 // mosquitto creates exactly that client with exactly that password — a name or password the
 // provisioner invented is one the consumer could never present.