docs(now): refresh date and add IGLA auto-workflow context

Updates NOW.md to 2026-07-07 and documents the auto-workflow
hardening changes in PR #1441.

Closes #1440

Author: Dmitrii Vasilev

.trinity/current_task/activity.md

@@ -1468,3 +1468,7 @@
 - **Commit:** 
 - **Files:** .github/workflows/auto-merge-ready-prs.yml,.github/workflows/brain-seal-refresh.yml,scripts/auto-close-prs.sh,scripts/auto-merge.sh
 
+## 2026-07-07T12:14:42Z — igla/w470-auto-workflow-harden
+- **Commit:** 
+- **Files:** docs/NOW.md
+

docs/NOW.md

@@ -1,6 +1,15 @@
-# NOW — Wave Loop 419 close-out / Wave Loop 420 setup (2026-07-05)
+# NOW — IGLA cycle 1 + Wave Loop 469 context (2026-07-07)
 
-Last updated: 2026-07-05
+Last updated: 2026-07-07
+
+## IGLA cycle 1 — auto-workflow hardening (Closes #1440)
+
+- PR #1441 hardens `.github/workflows/auto-merge-ready-prs.yml` and
+  `.github/workflows/brain-seal-refresh.yml` with explicit permissions,
+  L1 traceability gating, correct dry-run boolean handling, and change-detection
+  guards before `git commit`.
+- This closes issue #1440 (automated workflows could merge/commit without
+  issue linkage or review).
 
 ## Architecture — ADR-007 documents de-jure/de-facto split for generated .v in specs/ (Closes #1435)