docs(06-03): complete CI/CD pipeline plan

.planning/STATE.md

@@ -3,14 +3,14 @@ gsd_state_version: 1.0
 milestone: v1.0
 milestone_name: milestone
 status: executing
-stopped_at: Completed 06-01-PLAN.md
-last_updated: "2026-06-25T08:17:06.237Z"
+stopped_at: Completed 06-03-PLAN.md (Tasks 2-3, Task 4 checkpoint pending)
+last_updated: "2026-06-25T09:01:40.210Z"
 last_activity: 2026-06-25 -- Phase 06 execution started
 progress:
   total_phases: 6
   completed_phases: 4
   total_plans: 24
-  completed_plans: 21
+  completed_plans: 22
   percent: 67
 ---
 
@@ -26,7 +26,7 @@ See: .planning/PROJECT.md (updated 2026-06-18)
 ## Current Position
 
 Phase: 06 (desktop-client-ci-cd) — EXECUTING
-Plan: 2 of 3
+Plan: 3 of 3
 Status: Ready to execute
 Last activity: 2026-06-25 -- Phase 06 execution started
 
@@ -59,6 +59,7 @@ Progress: [████████░░] 86%
 | Phase 05-dashboard-calendar P03 | 11min | 4 tasks | 14 files |
 | Phase 05-dashboard-calendar PP04 | 5min | 2 tasks | 11 files |
 | Phase 06-desktop-client-ci-cd P01 | 5min | 2 tasks | 13 files |
+| Phase 06 P03 | 3min | 3 tasks | 3 files |
 
 ## Accumulated Context
 
@@ -92,6 +93,9 @@ Recent decisions affecting current work:
 - [Phase ?]: StoreExt trait import required for app.store() in Tauri 2.x
 - [Phase ?]: frontendDist=../src local page, navigate() for runtime URL override
 - [Phase ?]: CSP connect-src wildcard for configurable server URL (D-02)
+- [Phase ?]: Plain docker compose build statt build-push-action (Gitea JWT Pitfall 4)
+- [Phase ?]: Ephemeral runner mode (GITEA_RUNNER_EPHEMERAL=1) fuer Credential-Revokation pro Job
+- [Phase ?]: Separate docker-compose.ci.yml fuer opt-in CI-Infrastruktur
 
 ### Pending Todos
 
@@ -111,6 +115,6 @@ Items acknowledged and carried forward from previous milestone close:
 
 ## Session Continuity
 
-Last session: 2026-06-25T08:17:06.230Z
-Stopped at: Completed 06-01-PLAN.md
+Last session: 2026-06-25T09:01:40.203Z
+Stopped at: Completed 06-03-PLAN.md (Tasks 2-3, Task 4 checkpoint pending)
 Resume file: None