feat: Prepare for private content handling in ingest and tests

skills/ingest/scripts/run-ingest.sh

@@ -80,6 +80,7 @@ while IFS=$'\t' read -r path summary maturity; do
     queries)
       if [[ "$link" == queries/conflict-* ]]; then section="Conflicts"; conflict_label="CONFLICT"
       else section="Queries"; fi ;;
+    # private/ is not routed here — ingest is public-only. Add when private ingest is built.
     *) section="Sources" ;;
   esac
 

tests/helpers.bash

@@ -54,6 +54,11 @@ private: false
 
 ## Conflicts Pending Review (`wiki/queries/conflict-*.md`)
 *slugs only.*
+
+
+## Private Synthesis (`wiki/private/`)
+*Restricted access. Requires PRIVATE_CONTEXT: enabled and unlocked repo.*
+*List slug names ONLY. Do not append summaries — prevents metadata leakage.*
 EOF
 
   cat > "${g}/wiki/log.md" <<'EOF'