fix: remove em dashes from firewall reasons and seed (correct Space root paths)

Swap demo seed to generic taskflow-api sample; refresh queries; generalize secret hydration