docs(10-04): complete ingestion orchestration & multi-tenant-safe scheduler plan

.planning/STATE.md

@@ -6,14 +6,14 @@ current_phase: 10
 current_phase_name: ausschreibungs-radar-foundation-d-e-ingestion
 status: executing
 stopped_at: Completed 10-02-PLAN.md
-last_updated: "2026-07-21T09:01:03.926Z"
+last_updated: "2026-07-21T09:13:27.792Z"
 last_activity: 2026-07-21
 last_activity_desc: Phase 10 execution started
 progress:
   total_phases: 14
   completed_phases: 8
   total_plans: 46
-  completed_plans: 42
+  completed_plans: 43
   percent: 57
 ---
 
@@ -29,7 +29,7 @@ See: .planning/PROJECT.md (updated 2026-07-17)
 ## Current Position
 
 Phase: 10 (ausschreibungs-radar-foundation-d-e-ingestion) — EXECUTING
-Plan: 4 of 6
+Plan: 5 of 6
 Status: Ready to execute
 Last activity: 2026-07-21 — Phase 10 execution started
 
@@ -74,6 +74,7 @@ Progress: [░░░░░░░░░░] 0%
 | Phase 10 P01 | 15min | 3 tasks | 4 files |
 | Phase 10 P02 | 20min | 3 tasks | 6 files |
 | Phase 10 P03 | 35min | 3 tasks | 9 files |
+| Phase 10 P04 | 25min | 3 tasks | 5 files |
 
 ## Accumulated Context
 
@@ -149,6 +150,9 @@ Recent decisions affecting current work:
 - [Phase 10-03]: sourceNoticeId = OCDS release.id (stable, no version suffix), not the zip entry filename
 - [Phase 10-03]: eForms-DE XML primary for deadlineAt/estimatedValue/procedureType; OCDS primary for ocid/buyerName/title/cpvCodes/region/plz
 - [Phase 10-03]: bundesland left null this plan — NUTS-to-Bundesland mapping deferred to Phase 11 filter UI
+- [Phase ?]: Poll-once-fan-out-many scheduler: single named cron job, no tenant parameter — deliberately drops DKV's activeTenantId/findFirst per-tenant framing (Pitfall D)
+- [Phase ?]: SCHEMA-02 change detection implemented via prisma.tender.upsert({ where: { dedupKey } }) — identical notice never duplicates, changed contentHash updates in place
+- [Phase ?]: D-05 retention as two-phase updateMany/deleteMany with deadlineAt:{lt} filters — null-deadline rows structurally excluded, never auto-expired
 
 ### Pending Todos
 
@@ -186,7 +190,7 @@ Items acknowledged and carried forward from previous milestone close:
 
 ## Session Continuity
 
-Last session: 2026-07-21T09:00:23.857Z
+Last session: 2026-07-21T09:12:58.508Z
 Stopped at: Completed 10-02-PLAN.md
 Resume file: None
 Last activity: 2026-07-14 - Built LDAP per-user exclude/denylist filter (9d1323f), migration applied on live DB, verified via Playwright: sync deactivated 4 excluded service accounts (administrator/krbtgt/guest/dns-ldap), 2 real LDAP users stay active, 0 wrongly created