docs(issues): mark ISSUE-001 and ISSUE-002 resolved, update index

Both dispute privilege-escalation issues fixed in backend disputeRoutes.ts.
Index updated: 51 open (12 critical), 2 resolved.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Issues/ISSUE-001-patch-api-disputes-id-status-and-post-api-disputes-id-resolv.md

@@ -4,7 +4,9 @@ title: "PATCH /api/disputes/:id/status and POST /api/disputes/:id/resolve have n
 severity: critical
 domain: Dispute
 labels: [security, bug, backend, privilege-escalation]
-status: open
+status: resolved
+resolved: 2026-05-29
+fix: "Added authorizeRoles('admin') middleware to PATCH /:id/status and POST /:id/resolve in backend/src/routes/disputeRoutes.ts"
 created: 2026-05-29
 source: Doc vs Code Audit 2026-05-29
 ---

Issues/ISSUE-002-post-api-disputes-id-assign-has-no-role-guard-any-user-can-s.md

@@ -4,7 +4,9 @@ title: "POST /api/disputes/:id/assign has no role guard — any user can self-as
 severity: critical
 domain: Dispute
 labels: [security, bug, backend, privilege-escalation]
-status: open
+status: resolved
+resolved: 2026-05-29
+fix: "Added authorizeRoles('admin') middleware to POST /:id/assign in backend/src/routes/disputeRoutes.ts"
 created: 2026-05-29
 source: Doc vs Code Audit 2026-05-29
 ---

Issues/Issues Index.md

@@ -1,7 +1,7 @@
 # Issues Index
 
 > Generated from Doc vs Code Audit — 2026-05-29 · last reconciled 2026-05-29
-> **53 open issues** | 🔴 14 critical · 🟠 39 major · 🟡 0 minor · ⚪ 1 invalid (stale audit)
+> **51 open issues** | 🔴 12 critical · 🟠 39 major · 🟡 0 minor · ⚪ 1 invalid (stale audit) · ✅ 2 resolved
 
 ## 🔴 Critical