Resync hq ADR references 0044-0054 -> 0039-0049 after the hq record reconciliation

internal/secrets/seal.go

@@ -56,7 +56,7 @@ func Make(consumerKey, providerKey string) (Sealed, error) {
 
 	// 30 bytes, not 32: base64url of 30 is exactly 40 characters, and 40 is the longest secret an
 	// S3 access key accepts (8–40), the tightest of the backends a minted password reaches — the same
-	// "fit the tightest backend" rule ADR 0054 sets for the login, on the secret. 240 bits is ample.
+	// "fit the tightest backend" rule ADR 0049 sets for the login, on the secret. 240 bits is ample.
 	value := make([]byte, 30)
 	if _, err := rand.Read(value); err != nil {
 		return Sealed{}, err