docs: fix secretref marker rendering in credential surface

docs/reference/secretref-credential-surface.md

@@ -89,7 +89,8 @@ Scope intent:
 
 - `profiles.*.keyRef` (`type: "api_key"`)
 - `profiles.*.tokenRef` (`type: "token"`)
-  [//]: # (secretref-supported-list-end)
+
+[//]: # "secretref-supported-list-end"
 
 Notes:
 
@@ -116,7 +117,8 @@ Out-of-scope credentials include:
 - `auth-profiles.oauth.*`
 - `discord.threadBindings.*.webhookToken`
 - `whatsapp.creds.json`
-  [//]: # (secretref-unsupported-list-end)
+
+[//]: # "secretref-unsupported-list-end"
 
 Rationale:
 

src/secrets/target-registry.test.ts

@@ -58,12 +58,12 @@ describe("secret target registry", () => {
     };
 
     const supportedFromDocs = readMarkedCredentialList({
-      start: "[//]: # (secretref-supported-list-start)",
-      end: "[//]: # (secretref-supported-list-end)",
+      start: '[//]: # "secretref-supported-list-start"',
+      end: '[//]: # "secretref-supported-list-end"',
     });
     const unsupportedFromDocs = readMarkedCredentialList({
-      start: "[//]: # (secretref-unsupported-list-start)",
-      end: "[//]: # (secretref-unsupported-list-end)",
+      start: '[//]: # "secretref-unsupported-list-start"',
+      end: '[//]: # "secretref-unsupported-list-end"',
     });
 
     const supportedFromMatrix = new Set(