docs(audit): align documentation with post-remediation backend reality

- Update data model enums to match backend models
- Update API reference auth requirements
- Add dispute module references and warning blocks
- Add 2026-05-24 audit remediation callout to Overview
- Generate task breakdowns and audit artifacts
- Add doc alignment report (.taskmaster/reports/)

Taskmaster/Tasks/task-5-9.md

@@ -0,0 +1,35 @@
+---
+taskmaster_id: "5.9"
+status: "pending"
+priority: "high"
+depends_on: ["3", "4", "5", "6", "7", "8"]
+parent_id: "5"
+source: "taskmaster"
+generated_at: "2026-05-24T07:15:25.199Z"
+---
+
+# 5.9 - Prepare QA, rollout, analytics, and launch operations
+
+- [ ] 5.9 - Prepare QA, rollout, analytics, and launch operations #taskmaster #priority/high #status/pending ⏫ 🆔 tm-5-9 ⛔ tm-3 ⛔ tm-4 ⛔ tm-5 ⛔ tm-6 ⛔ tm-7 ⛔ tm-8
+
+## Metadata
+
+| Field | Value |
+| --- | --- |
+| Taskmaster ID | 5.9 |
+| Status | pending |
+| Priority | high |
+| Dependencies | 3, 4, 5, 6, 7, 8 |
+| Parent | 5 - Deliver Telegram-native app, bot, and wallet experience |
+
+## Description
+
+Prepare the Telegram app and bot for controlled release.
+
+## Details
+
+Test Telegram iOS, Android, Desktop, Web, light/dark themes, compact/fullscreen modes, slow network, blocked bot, expired sessions, and payment cancellation. Keep sandbox/test bot and production bot environments separated. Roll out through feature flags, internal allowlist, beta cohort, and production enablement. Track activation, linked accounts, request creation, offer response, payment start/completion, dispute activity, release approval, and notification opt-outs. Add runbooks for bot outage, Telegram API outage, payment provider outage, stuck payment, duplicate callback, suspicious wallet proof, and compromised bot token.
+
+## Verification
+
+See Telegram-native PRD acceptance criteria.