chore: update STATUS.md — 2026-05-26 PM agent cycle

STATUS.md

@@ -1,6 +1,6 @@
 # Company Status
 
-_Last updated: 2026-05-26 (agent cycle)_
+_Last updated: 2026-05-26 (agent cycle — afternoon)_
 
 ## APIs
 | API            | Spec | Code | Deployed | Listed on RapidAPI | Paying Users | MRR |
@@ -18,8 +18,13 @@ Legend: [x]=done, [~]=in-progress, [ ]=not started
 - **Container registry:** Gitea built-in registry selected; docs/registry.md committed — PENDING Gitea packages enabled (issue #4)
 - **Prometheus + Grafana:** Flux HelmRelease at `flux/monitoring/` — PENDING Flux wiring + Grafana secret (issue #7)
 - **Gatus status page:** Flux HelmRelease at `flux/monitoring/gatus-helmrelease.yaml` — PENDING Flux wiring (issue #8)
+- **API service manifests (NEW):** `flux/zip-enrichment/`, `flux/holidays/`, `flux/air-quality/` scaffolded (PR #48, closes #46)
 
-## Completed This Cycle (2026-05-26)
+## Completed This Cycle (2026-05-26 PM)
+- **#46** — Scaffolded Flux deployment manifests for all three API services (zip-enrichment, holidays, air-quality). PR #48 merged.
+
+## Completed Previous Cycle (2026-05-26 AM)
+- **#43** — secrets-checklist.md added (closed, PR #45)
 - **#36** — Cluster audit committed to `docs/cluster-audit.md` (closed)
 - **#40** — Legal docs (ToS, Privacy Policy, AUP) under `docs/legal/` (closed)
 - **#37** — docs-site Astro skeleton with Redoc pages; `npm run build` passes (closed)
@@ -33,28 +38,14 @@ All flux manifests validate successfully. Deployed components pending Flux activ
 - `monitoring` namespace + kube-prometheus-stack HelmRelease
 - `monitoring` Gatus HelmRelease (status.leeworks.dev, 90-day retention)
 - `docs-site` HelmRelease (docs.leeworks.dev)
+- `zip-enrichment` namespace + HelmRelease (zip.leeworks.dev) + rapidapi-proxy-secret placeholder ← NEW
+- `holidays` namespace + HelmRelease (holidays.leeworks.dev) + rapidapi-proxy-secret placeholder ← NEW
+- `air-quality` namespace + HelmRelease (aqi.leeworks.dev) + rapidapi-proxy-secret placeholder ← NEW
 
 ## Blockers (human operator action required)
-1. **Add api-company GitRepository+Kustomization to 0xWheatyz/Talos** at `testing1/first-cluster/cluster/flux/` — reference manifests ready in `flux/api-company-source/`
-2. **Create `gitea-leeworks-agents-token` secret** in `flux-system` namespace (HTTPS token for Gitea)
-3. **Create `gitea-runner-token` secret** in `gitea-runner` namespace (Gitea Admin → Actions → Runners → New Runner)
-4. **Enable Gitea packages** (`[packages] ENABLED=true` in app.ini) + DNS record `registry.leeworks.dev` → Gitea ingress
-5. **Create Grafana admin secret** in `monitoring` namespace (`GRAFANA_ADMIN_PASSWORD`)
-6. **Create Slack webhook secret** in `monitoring` namespace for Gatus alerts
-7. **DNS A records** for all 6 subdomains (zip, holidays, aqi, docs, status, registry) → cluster ingress IP (issue #33)
-
-## API Repos Status
-- `zip-enrichment`: Phase 3 server in progress (Fastify scaffold, routes, CI workflows)
-- `holidays`: Phase 3 server in progress (Fastify scaffold, business-day routes)
-- `air-quality`: Phase 1 in progress (openapi.yaml, Dockerfile)
-
-## Revenue
-- Gross MRR: $0
-- Net MRR (after ~26.5% fees): $0
-- Target: $100/mo net
-- Gap: $100
-
-## Next actions
-1. **Human operator:** unblock infrastructure (items 1-7 above)
-2. Once runner + Flux are live: API repo CI will build/push images and deploy to cluster
-3. Phase 1→2→3 completion across zip-enrichment, holidays, air-quality repos
+1. **Create `0xWheatyz/api-company` repo on Gitea** — every ship cycle fails until this exists (#41, #47)
+2. **Add api-company GitRepository+Kustomization to 0xWheatyz/Talos** at `testing1/first-cluster/cluster/flux/` — reference manifests ready in `flux/api-company-source/` (#2)
+3. **Create `gitea-leeworks-agents-token` secret** in `flux-system` namespace (HTTPS token for Gitea)
+4. **Create `gitea-runner-token` secret** in `gitea-runner` namespace (Gitea Admin → Actions → Runners → New Runner) (#3)
+5. **Enable Gitea packages** (for container registry at `registry.leeworks.dev`) (#4)
+6. **RapidAPI + PayPal setup** — manual, gated on operator turning 18 (#19, #44)