docs: update TODO checklist with stream 4 commit SHA

Co-Authored-By: Claude <noreply@anthropic.com>

Author: pedjak

.claude/TODO-OCPSTRAT-3040.md

@@ -56,7 +56,7 @@ Anyone:      Stream 6 (docs) ← after 4
 - [X] Remove `getUserInfo()` from Boxcutter applier — **OPRUN-4630** `7f5a6843`
 - [X] Remove pre-auth checks from Helm applier — **OPRUN-4631** N/A (PreAuthorizer removed in `9791b717`)
 - [X] Remove pre-auth checks from Boxcutter applier — **OPRUN-4631** N/A (PreAuthorizer removed in `9791b717`)
-- [X] Remove `PreflightPermissions` feature gate from `features.go` — **OPRUN-4631**
+- [X] Remove `PreflightPermissions` feature gate from `features.go` — **OPRUN-4631** `e1b7d2f1`
 - [ ] Remove `SyntheticPermissions` feature gate from `features.go` — **OPRUN-4632**
 - [X] Clean up RBAC watches if only needed for pre-auth — **OPRUN-4631** N/A (RBAC watches serve Boxcutter phase ordering)
 - [X] Rewire `main.go`: remove all SA/synthetic/preflight wiring, always use controller's own SA — **OPRUN-4630** `7f5a6843`