docs(10.1-04): record the Phase 10.1 security review and validation map

- 10.1-SECURITY-REVIEW.md: T-10.1-01 to T-10.1-22 and T-10.1-SC with
  mitigation, test or gate stage, observed result and 23 removal checks
- 10.1-VALIDATION.md: every plan task mapped to its command, all green
  under check-phase10.1.sh --all; nyquist_compliant and wave 0 complete
- Phase 10 deferred item for the parity failures marked resolved

.planning/phases/10-admin-vue-spa/deferred-items.md

@@ -14,5 +14,9 @@ Phase 10 changes and are not fixed here.
   fonoteka.go `feaca6b`), so `go test ./...` in fonoteka.go was already red in
   this package. Fix belongs to a Phase 9 follow-up: add the cabana history table
   and the three backend tables to the parity allow-lists with a reason.
+  status: resolved
+  **Resolved:** both tests pass since fonoteka.go `21c0f12` (fix(09): update parity
+  expectations for the backend admin schema); Plan 10.1-04 removed them from the
+  `check-phase10.sh` allow-list (`9aeb0e1`), and `check-phase10.1.sh` allow-lists nothing.
 - **`gofmt -l` lists `internal/build/registry.go`** in summercms.go. Pre-existing,
   untouched by Phase 10.