docs(07-05): complete the user API parity capture plan

Record that the 15 user routes stay pending until Go matches the PHP bodies, including the HTML 500 on a bad activation code and the still-valid token after logout.

Co-authored-by: Cursor <cursoragent@cursor.com>

.planning/STATE.md

@@ -3,14 +3,14 @@ gsd_state_version: 1.0
 milestone: v1.0
 milestone_name: milestone
 status: executing
-stopped_at: 07-05 blocked on isolated PHP instance
-last_updated: "2026-09-22T16:09:31.611Z"
+stopped_at: Completed 07-05-PLAN.md
+last_updated: "2026-09-22T16:43:55.719Z"
 last_activity: 2026-09-22
 progress:
   total_phases: 15
   completed_phases: 6
   total_plans: 43
-  completed_plans: 41
+  completed_plans: 42
   percent: 40
 ---
 
@@ -26,11 +26,11 @@ See: .planning/PROJECT.md (updated 2026-09-16)
 ## Current Position
 
 Phase: 07 (user-plugin-and-authentication) — EXECUTING
-Plan: 5 of 6
+Plan: 6 of 6
 Status: Ready to execute
 Last activity: 2026-09-22
 
-Progress: [██████████] 95%
+Progress: [██████████] 98%
 
 ## Performance Metrics
 
@@ -85,6 +85,7 @@ Progress: [██████████] 95%
 | Phase 07 P02 | 83m | 3 tasks | 22 files |
 | Phase 07 P03 | 95m | 3 tasks | 28 files |
 | Phase 07 P04 | 75m | 3 tasks | 16 files |
+| Phase 07 P05 | 45 | 3 tasks | 45 files |
 
 ## Accumulated Context
 
@@ -217,6 +218,6 @@ Items acknowledged and carried forward from previous milestone close:
 
 ## Session Continuity
 
-Last session: 2026-09-22T16:08:52.778Z
-Stopped at: 07-05 blocked on isolated PHP instance
-Resume file: 07-05-PLAN.md
+Last session: 2026-09-22T16:43:55.704Z
+Stopped at: Completed 07-05-PLAN.md
+Resume file: None