docs: annotate ROADMAP.md Phase 6 unchecked items + update STATUS.md sprint cycle

Closes leeworks-agents/api-company#176
Closes leeworks-agents/api-company#175

ROADMAP.md Phase 6 changes:
- DNS line: add '— issues #33, #106, #150'
- PayPal line: add '— issue #19'
- Paid tiers line: add '— issues #44 (original 3), #151 (VIN Decoder)'

STATUS.md changes:
- Last updated: 2026-06-02 (sprint planning cycle #175/#176)
- New 'Completed This Cycle' section with sprint summary
- Current Blockers date updated to 2026-06-02
- Added blockers #173 (ESO source secrets) and #174 (VIN metrics)

kustomize build flux/ = PASS

ROADMAP.md

@@ -41,11 +41,11 @@ Per-API: implement Fastify/FastAPI service matching `openapi.yaml` exactly. Rapi
 - [x] `docs/legal/terms-of-service.md` (issue #40 — closed ✅)
 - [x] `docs/legal/privacy-policy.md` (issue #40 — closed ✅)
 - [x] `docs/legal/acceptable-use-policy.md` (issues #40 ✅, #89 ✅)
-- [ ] DNS: `zip.leeworks.dev`, `holidays.leeworks.dev`, `aqi.leeworks.dev`, `docs.`, `status.`, `registry.`
+- [ ] DNS: `zip.leeworks.dev`, `holidays.leeworks.dev`, `aqi.leeworks.dev`, `docs.`, `status.`, `registry.` — issues #33, #106, #150
 - [x] VIN Decoder DNS `vin.leeworks.dev` (issue #130 — closed ✅)
 - [x] VIN Decoder RapidAPI listing (issue #131 — closed ✅ as tracker; operator action required)
-- [ ] PayPal linked to RapidAPI (manual, on 18th birthday)
-- [ ] Paid tiers enabled on RapidAPI listings (manual)
+- [ ] PayPal linked to RapidAPI (manual, on 18th birthday) — issue #19
+- [ ] Paid tiers enabled on RapidAPI listings (manual) — issues #44 (original 3), #151 (VIN Decoder)
 
 ## Revenue target
 

STATUS.md

@@ -1,6 +1,6 @@
 # Company Status
 
-_Last updated: 2026-06-02 (sprint planning cycle — #171/#170 ROADMAP/STATUS cross-refs)_
+_Last updated: 2026-06-02 (sprint planning cycle — #175/#176 STATUS/ROADMAP Phase 5/6 annotation)_
 
 ## APIs
 | API            | Spec | Code | Deployed | Listed on RapidAPI | Paying Users | MRR |
@@ -23,7 +23,15 @@ Legend: [x]=done, [~]=in-progress, [ ]=not started
 - **Image automation:** `flux/image-automation/` — ImageRepository + ImagePolicy + ImageUpdateAutomation for all three APIs
 - **VIN Decoder manifests:** `flux/vin-decoder/` — Flux HelmRelease + Kustomization committed (issue #140)
 
-## Completed This Cycle (2026-06-02 — Sprint Planning Cycle)
+## Completed This Cycle (2026-06-02 — Sprint Planning Cycle #175/#176)
+
+- **#176** — ROADMAP.md Phase 6 unchecked items annotated with issue cross-references: DNS — issues #33, #106, #150; PayPal — issue #19; Paid tiers — issues #44 (original 3), #151 (VIN Decoder). No checked items changed.
+- **#175** — STATUS.md updated with 2026-06-02 sprint planning cycle results (this entry). Last updated date set to 2026-06-02.
+- **Sprint Summary:** 2 new documentation issues created (#175 STATUS.md update, #176 ROADMAP Phase 5/6 annotation). 0 code issues created (all ROADMAP items already covered by existing issues). 0 issues closed (none stale). 0 reprioritizations.
+- **Current Blockers updated:** #173 (ESO source secrets in `external-secrets` ns) and #174 (VIN Decoder metrics instrumentation) added.
+- **`kustomize build flux/` = PASS** — no regressions confirmed.
+
+## Completed Previous Cycle (2026-06-02 — Sprint Planning Cycle)
 
 - **#171** — ROADMAP.md Phase 0 unchecked items annotated with issue #2, #3, #4; Phase 4 unchecked items annotated with issue #7, #8, #27; Phase 5 unchecked item annotated with issue #30. No checked-off items changed.
 - **#170** — STATUS.md updated with 2026-06-02 sprint planning cycle results (this entry). Last updated date set to 2026-06-02.
@@ -46,7 +54,7 @@ Legend: [x]=done, [~]=in-progress, [ ]=not started
 - **PR #160 closed** — had merge conflicts and ROADMAP.md regressions (unchecked completed items). Clean fix applied here.
 - **`kustomize build flux/` = PASS** — no regressions.
 
-## Current Blockers (as of 2026-06-01)
+## Current Blockers (as of 2026-06-02)
 
 In dependency order — operator tasks unless noted:
 
@@ -57,6 +65,8 @@ In dependency order — operator tasks unless noted:
 5. **P1 #83** — Configure `GITEA_TOKEN` Actions secret in zip-enrichment, holidays, air-quality repos (operator)
 6. **P1 #126** — Configure `GITEA_TOKEN` Actions secret in vin-decoder repo (operator — depends on #122 ✅)
 7. **P1 #127** — Create `gitea-registry` imagePullSecret in `vin-decoder` namespace (operator)
+8. **P2 #173** — Create ESO source secrets in `external-secrets` namespace for RapidAPI proxy-secret syncing (operator) — blocks ESO sync
+9. **P2 #174** — VIN Decoder metrics instrumentation in `leeworks-agents/vin-decoder` repo (agent task, depends on #18 deploy)
 
 ## Sprint Summary (2026-06-01 — Sprint Planning Cycle)
 - **Issues closed this cycle:** 0