docs(03): create phase plan

.planning/ROADMAP.md

@@ -116,7 +116,25 @@ Plans:
   3. A JWT-guarded `GET /_fonoteka/api/v1/genres` route returns a real `Genre` row read from Postgres.
   4. The response is diffed byte-for-byte against a fixture recorded from the live PHP backend using the Phase 2 harness, and the diff is green.
 
-**Plans**: TBD
+**Plans**: 4 plans
+
+Plans:
+
+**Wave 1**
+
+- [ ] 03-01-PLAN.md — Boot the Postgres-backed JWT genre route through both plugins
+
+**Wave 2** *(blocked on Wave 1 completion)*
+
+- [ ] 03-02-PLAN.md — Port active-collection counts, validation and Polish ordering
+
+**Wave 3** *(blocked on Wave 2 completion)*
+
+- [ ] 03-03-PLAN.md — Add typed params, isolated rollback and the first real parity pass
+
+**Wave 4** *(blocked on Wave 3 completion)*
+
+- [ ] 03-04-PLAN.md — Complete unit, integration and security verification
 
 ### Phase 4: CLI scaffolding, i18n and mail