https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/removing-sensitive-data-from-a-repository

I'm half surprised at how difficult they make this. If I delete the original remote repo and create a new one will their backend be extra clever and still resolve the orphaned hash? Seems like a coin toss.