Ticks all 66 plan steps and records spec 3 as shipped. Also corrects a stale line that still claimed existing cloud tenants are grandfathered by migration 0005. That migration was reverted before plan 2 shipped; those instances are read-only until licensed by hand, and the same file already said so one table above. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>