fix(docs): avoid MDX regex markers in secretref page

docs/reference/secretref-credential-surface.md

@@ -20,7 +20,7 @@ Scope intent:
 
 ### `openclaw.json` targets (`secrets configure` + `secrets apply` + `secrets audit`)
 
-{/_ secretref-supported-list-start _/}
+[//]: # "secretref-supported-list-start"
 
 - `models.providers.*.apiKey`
 - `skills.entries.*.apiKey`
@@ -89,7 +89,7 @@ Scope intent:
 
 - `profiles.*.keyRef` (`type: "api_key"`)
 - `profiles.*.tokenRef` (`type: "token"`)
-  {/_ secretref-supported-list-end _/}
+  [//]: # (secretref-supported-list-end)
 
 Notes:
 
@@ -104,7 +104,7 @@ Notes:
 
 Out-of-scope credentials include:
 
-{/_ secretref-unsupported-list-start _/}
+[//]: # "secretref-unsupported-list-start"
 
 - `gateway.auth.token`
 - `commands.ownerDisplaySecret`
@@ -116,7 +116,7 @@ Out-of-scope credentials include:
 - `auth-profiles.oauth.*`
 - `discord.threadBindings.*.webhookToken`
 - `whatsapp.creds.json`
-  {/_ secretref-unsupported-list-end _/}
+  [//]: # (secretref-unsupported-list-end)
 
 Rationale:
 

src/secrets/target-registry.test.ts

@@ -58,12 +58,12 @@ describe("secret target registry", () => {
     };
 
     const supportedFromDocs = readMarkedCredentialList({
-      start: "{/* secretref-supported-list-start */}",
-      end: "{/* secretref-supported-list-end */}",
+      start: "[//]: # (secretref-supported-list-start)",
+      end: "[//]: # (secretref-supported-list-end)",
     });
     const unsupportedFromDocs = readMarkedCredentialList({
-      start: "{/* secretref-unsupported-list-start */}",
-      end: "{/* secretref-unsupported-list-end */}",
+      start: "[//]: # (secretref-unsupported-list-start)",
+      end: "[//]: # (secretref-unsupported-list-end)",
     });
 
     const supportedFromMatrix = new Set(