test(07): persist human verification items as UAT

.planning/phases/07-deploy-v1/07-HUMAN-UAT.md

@@ -0,0 +1,36 @@
+---
+status: partial
+phase: 07-deploy-v1
+source: [07-VERIFICATION.md]
+started: 2026-05-15T16:35:00Z
+updated: 2026-05-15T16:35:00Z
+---
+
+## Current Test
+
+[awaiting human testing]
+
+## Tests
+
+### 1. Full Docker multi-stage build
+expected: `docker build -f backend/Dockerfile .` exits 0, producing a distroless image with /app/web and /app/worker binaries embedded. All 3 stages (assets, builder, runtime) complete without error. External CDN downloads (Tailwind v4, HTMX@2, Sortable@1.15.7) succeed.
+result: [pending]
+
+### 2. docker compose config validation
+expected: `docker compose -f backend/docker-compose.prod.yaml config --quiet` exits 0 with no warnings. All service references, volume names, and health check syntax are valid.
+result: [pending]
+
+### 3. Live production smoke test
+expected: After deploying to a VPS with a real domain and `.env.prod` configured, Caddy provisions TLS, `/healthz` returns 200 `{"status":"ok"}`, and `/readyz` returns 200 `{"status":"ok","db":"ok"}` after goose migrations run automatically on startup.
+result: [pending]
+
+## Summary
+
+total: 3
+passed: 0
+issues: 0
+pending: 3
+skipped: 0
+blocked: 0
+
+## Gaps