docs: record published second-review fixes

Point the active-work ledger at the failure-containment and dedup-publication
checkpoint while leaving PR #148 open for user review.

docs/active-work.md

@@ -56,7 +56,7 @@ If it does not, stop and repair the remote/fetch configuration.
 ## Active lane: GPU initial target
 
 - Portable implementation branch: `githubsucks/gpu-initial-target` @
-  `bef1c08` (PR review fixes plus complete post-review verification); worktree
+  `be8c67c` (second-review fixes plus complete verification); worktree
   `../pmacs-gpu-initial-target`.
 - Approved framing branch: `githubsucks/gpu-initial-target-framing`;
   Revision 2 checkpoint `71039d1`.
@@ -64,8 +64,8 @@ If it does not, stop and repair the remote/fetch configuration.
   (folding Stage 1 #142); current canonical `main` @ `47581f4` is integrated
   conflict-free by merge `d6d4be6`. Protocol was v19 before this work.
 - State: implementation checkpoint `2dd30ec`; first review-fix checkpoint
-  `bef1c08`. Second-review fixes are complete locally, smoke-tested, and fully
-  gated at protocol v20; publication is next. PR #148 remains open for user
+  `bef1c08`; second-review checkpoint `be8c67c`. Integrated, smoke-tested,
+  fully gated, and published at protocol v20. PR #148 remains open for user
   review: `https://github.com/levineuwirth/pmacs/pull/148`.
 - Scope delivered: one session-scoped `pmacs --gpu [--socket …] FILE` target,
   protocol-v20 semantic bootstrap, launcher-owned tilde/cwd resolution, exact