Replace a value given by hand like one the mesh made (hq ADR 0228)

A given own secret the module reads at start is held by nobody but that
module, so the mesh need not read it to replace it: secret rotate now
works on it, and a value given through secret accept is replaced on its
own after the module's first good start under the mesh. Only a value an
outside party issues (own-secrets "issued-by": "outside") or one the
module applies stays as given, refused with the reason.

internal/broker/streams.go

@@ -208,7 +208,9 @@ var ControllerStates = []string{"applied", "refused", "built-before",
 	"condition-raised", "condition-changed", "condition-cleared",
 	// And the self-check's heartbeat, at the end of every run (to-be 45 §4, S10): watched from a
 	// machine that is not the control node, so the controller going quiet is itself said.
-	"doctor-heartbeat"}
+	"doctor-heartbeat",
+	// And a value given by hand, replaced after its module's first good start (novox/hq ADR 0228).
+	"secret-replaced"}
 
 // BusAdvisories are what the bus server says about the mesh's own account that the controller
 // reads (novox/hq to-be 45 §3, S9): a durable consumer that handed a message over as often as it