Captures the SRI integrity hashes in static/index.html (xterm.js, ttyd assets)
and in the upcoming claude-design/preview*.html mockups. These are public
content-addressing hashes for unpkg.com / cdnjs scripts, not secrets — but
they trip the global pre-commit detect-secrets hook by entropy.
Baseline committed first so the design-bundle commit doesn't get blocked.
Mortdecai