docs(quick-260927-q23): fix CR-01: /auth/refresh must enforce tokens_valid_after and is_activated

.planning/STATE.md

@@ -31,7 +31,7 @@ See: .planning/PROJECT.md (updated 2026-09-16)
 Phase: 10 (Admin Vue SPA) — EXECUTING
 Plan: 5 of 5
 Status: Phase complete — ready for verification
-Last activity: 2026-09-27 — Phase 10 plan 05 unit tests, assembled acceptance and phase gate completed
+Last activity: 2026-09-27 - Completed quick task 260927-q23: fix CR-01: /auth/refresh must enforce tokens_valid_after and is_activated
 
 Progress: [██████████] 100%
 
@@ -348,6 +348,12 @@ None yet.
 - Phase 11 (River dual-driver split) is documented but unverified against a real build — plan with `--research-phase` and budget a timed-latency test.
 - Phase 8 UI gate: scripts/check-phase8-ui.mjs --final-gate's real Playwright browser matrix (32 UI-SPEC scenarios) is unimplemented (deliberate fatal() at check-phase8-ui.mjs:458, never authored by 08-05); stage_ui_harness must keep failing closed until a Playwright spec is authored. User approved Phase 8 closure on 2026-09-24 with this gap carried forward -- see 08-10-SUMMARY.md and .planning/phases/08-oauth2-1-authorization-server/deferred-items.md.
 
+### Quick Tasks Completed
+
+| # | Description | Date | Commit | Directory |
+|---|-------------|------|--------|-----------|
+| 260927-q23 | fix CR-01: /auth/refresh must enforce tokens_valid_after and is_activated | 2026-09-27 | be4a923 | [260927-q23-fix-cr-01-auth-refresh-must-enforce-toke](./quick/260927-q23-fix-cr-01-auth-refresh-must-enforce-toke/) |
+
 ## Deferred Items
 
 Items acknowledged and carried forward from previous milestone close: