docs(audit): align documentation with post-remediation backend reality

- Update data model enums to match backend models
- Update API reference auth requirements
- Add dispute module references and warning blocks
- Add 2026-05-24 audit remediation callout to Overview
- Generate task breakdowns and audit artifacts
- Add doc alignment report (.taskmaster/reports/)

Taskmaster/Tasks/task-4-1.md

@@ -0,0 +1,35 @@
+---
+taskmaster_id: "4.1"
+status: "done"
+priority: "high"
+depends_on: []
+parent_id: "4"
+source: "taskmaster"
+generated_at: "2026-05-24T07:15:25.199Z"
+---
+
+# 4.1 - Assign security ownership and launch decision criteria
+
+- [x] 4.1 - Assign security ownership and launch decision criteria #taskmaster #priority/high #status/done ⏫ 🆔 tm-4-1
+
+## Metadata
+
+| Field | Value |
+| --- | --- |
+| Taskmaster ID | 4.1 |
+| Status | done |
+| Priority | high |
+| Dependencies | None |
+| Parent | 4 - Define backend security and refactor strategy from latest audit |
+
+## Description
+
+Define who owns security decisions and what must be true before public launch or migration work proceeds.
+
+## Details
+
+Completed. Produced 09 - Audits/Security Ownership and Launch Decision Criteria.md. Contains: RACI matrix (10 decision areas, 6 roles, fallback rules), 42-item launch safety gate checklist with Required/Strongly Recommended/Deferred classifications cross-referenced to audit findings, launch priority decision (harden first, redesign deferred), external pentest decision (yes, before public launch, with compensating controls), 12-item deferred decisions register with owners and deadlines.
+
+## Verification
+
+Written owner/RACI and launch gate checklist are accepted by leadership and engineering.