Document local git credential source

TODO.md

@@ -4,6 +4,8 @@
 - This file is both backlog and handover log.
 - Future plans written in this file should be written in Korean by default.
 - When a meaningful coding/documentation task is completed, the workflow should aim to finish with a push to the git remote when the remote is available.
+- Every task handled in this repository should add or update a corresponding work note in `TODO.md` before the task is considered complete.
+- Git push authentication for this repo currently relies on the local credential file at `.local/git-credentials.psd1`; if push auth fails, retry using that file before treating the change as local-only.
 - Every meaningful change should record:
   - what changed
   - why it changed
@@ -266,6 +268,27 @@
   - backend debug broadcasts
 
 ## Recent Change Log
+- Date: `2026-03-24`
+- What changed:
+  - Added a working-rule note that git push authentication for this repository should be retried with the local credential file `.local/git-credentials.psd1` before leaving work in a local-only state.
+- Why it changed:
+  - The repository already stores the active git credential source locally, so the handover rules should point to it explicitly when push authentication fails.
+- How it was verified:
+  - local file presence check for `.local/git-credentials.psd1`
+- What is still risky or incomplete:
+  - The credential file is a local-machine dependency, so future environment changes still need to keep the file available and valid.
+
+- Date: `2026-03-24`
+- What changed:
+  - Added an operating rule that every completed task in this repository should also be reflected in `TODO.md`.
+- Why it changed:
+  - The repository workflow was tightened so the handover file stays current after every task instead of only after larger batches of work.
+- How it was verified:
+  - `git diff -- TODO.md`
+- What is still risky or incomplete:
+  - This rule still depends on disciplined execution in each turn, so future work should keep verifying that `TODO.md` is updated before commit/push.
+  - Follow-up push of commit `a471c21` failed on `2026-03-24` with `Authentication failed for 'https://git.savethenurse.com/savethenurse/ai-media-hub/'`, so the latest rule update is currently local-only until credentials are restored.
+
 - Date: `2026-03-24`
 - What changed:
   - Added a frontend-only `Video / Image` media-type toggle to Zone A.