remove stale TODO for state-docs-vmcp sealed secret

Secret is replicated from Keycloak into toolhive-system; no sealed secret needed.

Co-Authored-By: Claude Sonnet 4.6 <[email protected]>

manifest/overlays/production/kustomization.yaml

@@ -11,7 +11,6 @@ resources:
   - ingressroute.yaml
   - secrets/gitea-mcp-secret.sealed.secret.yaml
   - secrets/argocd-mcp-secret.sealed.secret.yaml
-  # TODO: add after sealing — secrets/state-docs-vmcp-secret.sealed.secret.yaml
   - mcp-tool-config-state-docs.yaml
   - mcp-tool-config-ops.yaml
   - mcp-tool-config-dev.yaml