learn(bug-logs): ten ledger entries from a five-app lab report (TK-037 to TK-046)

[MendixMau]

Direct lane

What changed and why (one paragraph): Ten ledger entries in bug-logs/mxcli-bugs.md (plus one line in the on-demand learned-constants-and-secrets.md) from a five-app lab field report (mxcli v0.26.0, Mendix 11.15, defects TK-037 to TK-046): navigation glyph/partial-modify reset, workflow call-microflow System.Workflow parameter, describe constant/show constants printing stored secret defaults (high), business event MDL gaps, Business Events AppId copied with the model, marketplace install fix-ups (partly covered by mendixlabs/mxcli #1151), run --local scheduled events off by default, test --local fixed ports (fixed upstream in v0.27.0: --app-port/--admin-port/--serve-port), a Business Events consumer dropping oversize ce_id records, and published REST 404-vs-403. Each entry has the workaround and the right owner (mxcli, Business Events module, or Mendix runtime). The TK-044 line in testing-shape.md (a baseline file) was deliberately left out of this PR; it waits for a behaviour A/B. Upstream drafts are kept outside the repo, not filed.

Impact

Row	Answer
Process	none: no gate, step or artifact added; ledger and one on-demand skill line.
Dependencies	bug-logs/mxcli-bugs.md (append-only), skills/learned-constants-and-secrets.md (on-demand per skill-routing.tsv), CHANGELOG.md. Conflicts only in CHANGELOG/ledger tail with #397 (mechanical). No new artifact reads.
Context cost	none: no routed or always-loaded file touched (learned-constants-and-secrets.md is ondemand in bin/lib/skill-routing.tsv; the ledger is read via bin/bug-lookup.sh).
Behaviour	NOT RUN: on-demand text only (ledger entries surfaced by bug-lookup.sh; one situational skill line).
Runtime	n/a: no script changed.

Field evidence — a five-app lab project (mxcli v0.26.0, Mendix 11.15); entries checked against the mxcli v0.27.0 CHANGELOG and source (no binary run for TK-038).

• No client data (leak guard with LEAKGUARD_ALLOW_NO_DENYLIST=1, bin/check-no-private-citations.sh clean)
• Size cap: 3 files, 132 lines (ledger text)
• Test tier: T0 (bin/check-pr-discipline.sh, bin/bug-lookup.sh --index lists the new entries)
• CHANGELOG.md lines appended, crediting the source
• New bug entries headed ## BUG-DRAFT-<slug>:

🤖 Generated with Claude Code