docs(plan): Phase 1a implementation plan for data layer and permissions

Eighteen tasks, 86 steps, covering the PocketBase schema, auth, the
field-level whitelist that PocketBase rules cannot express, the three
client routes, and all five acceptance tests from the spec.

Board UI is deferred to Plan 1b so the security boundary can be reviewed
on its own rather than inside a large UI diff.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
Dave 2026-09-16 09:20:55 +02:00
parent bafe7ca970
commit 6cfc7ee7cf

File diff suppressed because it is too large Load diff