docs: add changelog entry for #1435

Generated with [Linear](https://linear.app/sourcebot/issue/SOU-1495/sourcebot-devsourcebot-codeqljsinsufficient-password-hash-high#agent-session-424c6dc8)

Co-authored-by: linear-code[bot] <222613912+linear-code[bot]@users.noreply.github.com>

Author: linear-code[bot]

CHANGELOG.md

@@ -8,7 +8,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Fixed
-- [EE] Derived the MCP tool-list cache-key segment from requested OAuth scopes without a cryptographic hash, resolving a false-positive `js/insufficient-password-hash` CodeQL alert. [#PLACEHOLDER](https://github.com/sourcebot-dev/sourcebot/pull/PLACEHOLDER)
+- [EE] Derived the MCP tool-list cache-key segment from requested OAuth scopes without a cryptographic hash, resolving a false-positive `js/insufficient-password-hash` CodeQL alert. [#1435](https://github.com/sourcebot-dev/sourcebot/pull/1435)
 
 ## [5.1.0] - 2026-07-10