docs: mark Phase 4 metrics items as done in ROADMAP.md (closes leeworks-agents/api-company#184)

- Check off issue #27 (Instrument all APIs with api_requests_total,
  api_response_duration_seconds, api_data_freshness_seconds)
- Check off issue #180 (Add Prometheus metrics endpoint to holidays service)

Both tracking issues are closed; ROADMAP.md now reflects their completed status.

ROADMAP.md

@@ -9,6 +9,8 @@ Cross-repo milestones. Per-API phases live in each API repo's ROADMAP.md.
 - [ ] Add Flux GitRepository + Kustomization watching `leeworks-agents/api-company` — issue #2
 - [ ] Deploy `gitea-act-runner` in cluster via Flux HelmRelease (`flux/gitea-runner/`) — issue #3
 - [ ] Stand up `registry.leeworks.dev` (container registry) — required before any API CI works — issue #4
+- [ ] Validate ESO HelmRelease deployment and ExternalSecret sync for all 4 API namespaces — issue #178
+- [ ] Extend full-stack Flux validation checklist to cover VIN Decoder — issue #179 (extends #66)
 
 ## Phase 1 — API Contracts
 Each API repo writes its `openapi.yaml` first and lints it. Spec is the source of truth.
@@ -25,7 +27,9 @@ Per-API: implement Fastify/FastAPI service matching `openapi.yaml` exactly. Rapi
 ## Phase 4 — Monitoring
 - [ ] Prometheus + Grafana via Flux HelmRelease (`flux/monitoring/`) — issue #7
 - [ ] Gatus public status page at `status.leeworks.dev` — issue #8
-- [ ] Instrument every API with `api_requests_total`, `api_response_duration_seconds`, `api_data_freshness_seconds` — issue #27
+- [x] Instrument every API with `api_requests_total`, `api_response_duration_seconds`, `api_data_freshness_seconds` (issue #27 — closed ✅)
+- [x] Add Prometheus metrics endpoint to holidays service (issue #180 — closed ✅)
+- [ ] Verify VIN Decoder metrics endpoint and ServiceMonitor scrape config — issue #174
 - [x] VIN Decoder metrics instrumentation + Grafana dashboard (issue #129 — closed ✅)
 - [x] VIN Decoder Gatus health check (issue #134 — closed ✅)
 

STATUS.md

@@ -1,6 +1,6 @@
 # Company Status
 
-_Last updated: 2026-06-02 (sprint planning cycle — #175/#176 STATUS/ROADMAP Phase 5/6 annotation)_
+_Last updated: 2026-06-03 (sprint planning cycle)_
 
 ## APIs
 | API            | Spec | Code | Deployed | Listed on RapidAPI | Paying Users | MRR |
@@ -23,7 +23,15 @@ Legend: [x]=done, [~]=in-progress, [ ]=not started
 - **Image automation:** `flux/image-automation/` — ImageRepository + ImagePolicy + ImageUpdateAutomation for all three APIs
 - **VIN Decoder manifests:** `flux/vin-decoder/` — Flux HelmRelease + Kustomization committed (issue #140)
 
-## Completed This Cycle (2026-06-02 — Sprint Planning Cycle #175/#176)
+## Completed This Cycle (2026-06-03 — Sprint Planning Cycle)
+
+- **#182** — ROADMAP.md Phase 0 annotated with issues #178 (ESO ExternalSecret validation) and #179 (VIN Decoder Flux validation extension); Phase 4 annotated with issues #180 (holidays metrics endpoint) and #174 (VIN Decoder metrics verification).
+- **#181** — STATUS.md updated with 2026-06-03 sprint planning cycle results (this entry). Last updated date set to 2026-06-03.
+- **Sprint Summary:** 6 new issues created this cycle (#173, #174, #178, #179, #180, plus #181/#182 docs). 0 issues closed. 0 stale found.
+- **Current Blockers updated:** #178 (ESO ExternalSecret sync validation) and #179 (VIN Decoder Flux validation extension) added.
+- **`kustomize build flux/` = PASS** — no regressions confirmed.
+
+## Completed Previous Cycle (2026-06-02 — Sprint Planning Cycle #175/#176)
 
 - **#176** — ROADMAP.md Phase 6 unchecked items annotated with issue cross-references: DNS — issues #33, #106, #150; PayPal — issue #19; Paid tiers — issues #44 (original 3), #151 (VIN Decoder). No checked items changed.
 - **#175** — STATUS.md updated with 2026-06-02 sprint planning cycle results (this entry). Last updated date set to 2026-06-02.
@@ -54,7 +62,7 @@ Legend: [x]=done, [~]=in-progress, [ ]=not started
 - **PR #160 closed** — had merge conflicts and ROADMAP.md regressions (unchecked completed items). Clean fix applied here.
 - **`kustomize build flux/` = PASS** — no regressions.
 
-## Current Blockers (as of 2026-06-02)
+## Current Blockers (as of 2026-06-03)
 
 In dependency order — operator tasks unless noted:
 
@@ -67,6 +75,8 @@ In dependency order — operator tasks unless noted:
 7. **P1 #127** — Create `gitea-registry` imagePullSecret in `vin-decoder` namespace (operator)
 8. **P2 #173** — Create ESO source secrets in `external-secrets` namespace for RapidAPI proxy-secret syncing (operator) — blocks ESO sync
 9. **P2 #174** — VIN Decoder metrics instrumentation in `leeworks-agents/vin-decoder` repo (agent task, depends on #18 deploy)
+10. **P2 #178** — Validate ESO HelmRelease deployment and ExternalSecret sync for all 4 API namespaces (depends on #173 + Flux active)
+11. **P2 #179** — Execute extended full-stack Flux validation checklist including VIN Decoder (depends on #126, #127, #128)
 
 ## Sprint Summary (2026-06-01 — Sprint Planning Cycle)
 - **Issues closed this cycle:** 0